Loading ...
Sorry, an error occurred while loading the content.

Re: [forms-dev] OT: Using original/alias column names in forms

Expand Messages
  • Manuel Lemos
    Hello, ... What harm can anybody cause knowning the original column names? I don t see how can using alias names be worth the effort. -- Regards, Manuel Lemos
    Message 1 of 2 , Oct 10, 2006
    • 0 Attachment
      Hello,

      on 10/11/2006 02:08 AM Shekar C. Reddy said the following:
      > Manuel and others,
      >
      > Inviting opinions on what is a better approach in web-forms: using the
      > original column names or fake/alias names (with alias-column-mapping
      > to keep the original column names from prying eyes). However, alias
      > names would add a level of complexity and might impact performance. Eg:
      >
      > Alias:
      > <input type="text" name="user_id">
      >
      > Real Column Name:
      > <input type="text" name="UserID">
      >
      > Currently using a PDO class that quotes SQL and uses prepare to
      > execute SQL and so, SQL-Injection may not be an issue at all. But I'm
      > still confused if I should eliminate the aliases and stick with
      > original column names to simplify and improve performance. Thoughts?

      What harm can anybody cause knowning the original column names?

      I don't see how can using alias names be worth the effort.

      --

      Regards,
      Manuel Lemos

      Metastorage - Data object relational mapping layer generator
      http://www.metastorage.net/

      PHP Classes - Free ready to use OOP components written in PHP
      http://www.phpclasses.org/
    Your message has been successfully submitted and would be delivered to recipients shortly.