Letting users modify their own data

He has: 688 posts

Joined: Feb 2001

I've got this site that contains a database of alumni (I guess we'll call them users). It's done in php and used a mySQL database. Very simple stuff because I don't really know what I'm doing. As such, here's how my process currently works:

I don't want the public to have direct access to the database because it can be abused. Alumni fill out a web form which is emailed to me. I then take the email form and copy and paste the data into a different hidden web form which does access the database and is password protected.

What I would like to do is transform this process so that users can modify their own data themselves, without the need for me to get involved. (I'm ignoring the ability to add a new user for now for simplicity). Aside from the logistics of giving everybody a password when they never had one before... how might I best accomplish this feat?

I suppose there's two main choices. One would be for me to do it myself (with your help) and add this functionality to my simple database, but I really don't even know where to begin because I'm a novice. The second option would be to install a script which would allow users to modify their own info. The problem there is that I can't find one that is meant to access and modify data in an exisitng customized database. Full admin scripts abound but not simple "just yourself" management scripts.

Any ideas or advice? If I were to do this myself, what do I need to do (dumb it down so I can understand what would be involved).

Suzanne's picture

She has: 5,507 posts

Joined: Feb 2000

DIY:

    yes, passwords, preferably encrypted (some also encrypt usernames)
    change table or history table for your own sanity and just in case-ed-ness
    password retrieval
    allow edits to only specific things, like address, phone, et cetera
    edits to main identifiers (name) should be sent to you, not done automatically, or have them logged and a notification sent to you

Otherwise it's more a matter of how to get them to login and such than to allow them to edit their own contact information. Setting the login to only allow them access to their file, and then setting up the form shouldn't be too difficult.

sitepoint.com/books/ -- both the set and the beginner php books are really invaluable references along with mysql.com and php.net for learning this stuff.

Plan it first, work out the functions and the pages (wireframe) and then go one step at a time, you'll do fine.

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.