[FX.php List] FM accts vs. acct & password fields?

[Joel Shapiro]

Dear Sleepy Monkey

I suppose if you anticipate just a few users, this might be an  
option.  I can't imagine setting up a system that would create dozens  
or hundreds of FM accounts.

Another issue with all these FM accounts would be dealing with  
replacing an FM file on FMServer -- either after a crash or, as I  
sometimes do, dropping in an updated Web file without having to touch  
the Data file.  In such circumstances, all FM accounts, and thus  
website logins, would be lost and would need to be recreated.  On top  
of that, if there were separate Data & Web files, then the php-called  
FM script would need to deal with syncing the new/re-created Web  
accounts & passwords w/ the already existing Data accts & passwords.   
I say: yuck.

-Joel


On Jun 19, 2008, at 8:48 AM, william.downs wrote:

> Hi Joel,
>
> I personally don't see any risk really or trouble in creating FM  
> accounts - IF you assign a Privilege Set with only XML extended  
> Privileges - which is scriptable anyway.
>
> it's true that you may have a lot of Filemaker Accounts - but as it  
> is used for Authentication I like that idea. The same script can  
> create a User record in the Users table AND create an FM account -  
> this then stops anyone from knowing the Users password - which  
> would not be the case if it is stored in a table
>
> After a successful login, I set the users login details in SESSION  
> variables -
>
> Of course, it has once again been over a week since I slept  
> properly - so I may be (most likely) missing something - please  
> feel free to call me a monkey.
>
> Kindest Regards,
>
> William
>
> On 17 Jun 2008, at 03:43, Joel Shapiro wrote:
>> Thanks Dale & Bob
>>
>> Yeah I agree that creating FM accts would be too much trouble and  
>> too much unnecessary risk.  Plus, if there are gonna be a lot of  
>> users, that would be a lot of FM accts, which just seems like  
>> bulk.  Plus if the web file is separate from the data file, the  
>> script would need to create the accounts in both -- and check for  
>> uniqueness through FileMaker errors -- and... phew!
>>
>> Good.  You've helped me think it through more.
>>
>> -Joel
>>
>>
>> On Jun 16, 2008, at 7:28 PM, Dale Bengston wrote:
>>
>>> Hi Joel,
>>>
>>> We do it table-based. Access to FileMaker accounts is not  
>>> something I'd personally feel good about opening up to web users.
>>>
>>> Dale
>>>
>>> On Jun 16, 2008, at 8:47 PM, Joel Shapiro wrote:
>>>
>>>> Hi all
>>>>
>>>> A FileMaker colleague has asked me about a new php project of  
>>>> his in which users will create their own accounts via the  
>>>> website.  He's thinking that the user accounts would be actual  
>>>> FileMaker accounts.  I would think that a User table with  
>>>> username and password fields would be the way to go, but I  
>>>> wanted to check if anybody here creates FM accounts for website  
>>>> users.  Does anybody??  Or anyone have any relevant comments?   
>>>> (I don't know their anticipated number of users.)
>>>>
>>>> TIA,
>>>> -Joel
>>>> _______________________________________________
>>>> FX.php_List mailing list
>>>> FX.php_List at mail.iviking.org
>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>
>>> _______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list