> I disagree, you can restrict access to SELECT only Sure, but no access is much more secure than restricted access.
> and plus > any normal form > on a web page has access to a DB in much more insecure ways > (SQL injection, > etc.), What you consider insecure should not been written directly to a database. The form is processed by a server-side executable which should check incoming data before writing. > and as I said, it must be a 'real-time' progress meter without > refreshing the .php/.html page. > > Javascript is not able to query the DB. Of course it is not:) As Flash is not. Nothing client-side is able to without something server-side. But it is able to connect to a server and therefore able to load data from there. Only makes sense with http-connections - what result in some kind of refresh - but refreshing the whole page is not needed. Considering Flash you should have a look at http://www.macromedia.com/support/flash/action_scripts/actionscript_dictiona ry/actionscript_dictionary425.html Regards, TomH -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]