2 ms·
It still doesn't check if a particular id belongs to the user, so you can delete all the items in the table. But I agree that's different kind of problem :)
by martinml 13y ago
It still doesn't check if a particular id belongs to the user, so you can delete all the items in the table. But I agree that's different kind of problem :)
- jarofgreen 13y agoYour assuming it's a system where data belongs to set users - maybe any user is allowed to delete any piece of data.