Subject Re: [ib-support] previleges according to date
Author Milan Babuskov
----- Original Message -----
From: <irel_llc@...>
To: <ib-support@yahoogroups.com>
Sent: Saturday, December 28, 2002 12:23
Subject: [ib-support] previleges according to date

> These SPs will check the field date value against the current date.
>
> However I see a big security hole: normal users could change the PC
> date and modify whatever row they want.
>
> Is there any better solution ?

Maybe if you compare against the max_date entered, i.e.

instead of: if (new.date > current_timestamp)
use: if (new.date > (select max(date_field) from table).

HTH

Milan Babuskov
http://fbexport.sourceforge.net

P.S. I totally agree with Doug's answer anyway.