I also now put a confirmation page between the link to delete and the actual delete page.. this confirmation page has a form where you have to actually type the word DELETE into a form field and hit the submit button to do the deletion, so a web crawler can't trigger it.
At 09:30 AM 2/5/2003, you wrote: >|> A long time ago, I made a really stupid mistake that results in >|> deletion of all data from a table... >| >| >| A tip I picked up from somewhere - it might even have been this list >| - is to not ever actually delete records using code. Instead, I have >| a dtDeleted field, which is set to the current date when I want to >| delete the record. When doing selects, I add "WHERE dtDeleted IS >| NULL" to get only non-deleted records. >| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
