I have another question to add to my previous post about dbman templates gossamer-threads.com/scripts/forum/resources/Forum12/HTML/000365.html (which I still need some help on if anyone has some ideas).

I am setting up an online ordering system for my client (as well as the listings database -- they are separate). What I would like to do is something like the following:

- have a link directly to the add form where customers fill out their info and stuff securely.

- They get a confirmation email message

- I get an email message telling me that there's an order waiting for me to view.

- I go view the order through the secure server and that's that.

I'm not exactly sure how to set the permissions for this sort of thing. Basically, the customers will not be able to view/search/modify etc. the orders however I will be able to if needed. Is this possible?

dahamsta, you said that there's some kind of thing that will detect to make sure that the orders will be viewed through the secure server - how would I go about doing this?

If anyone has any suggestions for online ordering, please let me know 'cuz I'm kindof new at this. As for what I'm asked above, any help is greatly appreciated.

I'm still trying to figure out the whole template thing like I mentioned above so if anyone has any ideas for that, please let me know. Once this is done, it'll be all good and I won't be able to thank everyone enough.

Thanks again!




------------------
Jason
Extreme mtb
http://extreme.nas.net

Does anyone have any ideas on how I would get something like this to work? I'm kind of stuck on this one.

------------------
Jason
Extreme mtb
http://extreme.nas.net

I'm sorry I didn't answer before, but as soon as I hit the word "securely," I knew I didn't know anything about it. I know nothing at all about how to work with a secure server.


------------------
JPD

The online order form will be loaded through a secure server and the data files will be written above the web directory for more security. Sorry if it was a bit confusing. I'm just having trouble with the rest of the stuff - Basically, the person fills out the order form and a message is sent to me saying there's an order and I log in and get it. So the person filling out the form only has the ability to "add" to the database but I will have full permissions. The person filling out the form shouldn't even know that there are other options (view/modify etc.) Does that make sense? If you need some more info, just let me know.

As for the template usage, I'm still looking for ideas on how to do that as well. Currently, I have a subroutine in the db.cgi that is called by the html.pl to insert the page top/bottom. Can I put that in the html.pl instead of the db.cgi?

I appreciate all of the help and ideas that everyone has. Thanks again!

------------------
Jason
Extreme mtb
http://extreme.nas.net

Oh, okay. I thought I was going to have to worry about the secure server part.

You don't want to have the user log on, right? I'm assuming that from where you said

If my assumption is correct, set the following in the .cfg file:

$auth_no_authentication = 0;
$auth_allow_default = 1;
@auth_default_permissions = (0,1,0,0,0);
$auth_signup = 0;
$auth_user_field = -1;

The other settings won't matter.

The options to view, modify and delete will not show up in the footer if they don't have permissions, so that's nothing to worry about.

Your link to the add form would be

http://www.server.com/cgi-bin/db.cgi?db=default&uid=default&add_form=1

The email messages could be sent out from the html_add_success subroutine. There's a number of posts on the forum about that, but I'll work you through it if you need me to.

You would set your permissions at the beginnning. Log on with the admin/admin userid/password in the default file, add your own userid and password by using the "Admin" link (checking all the boxes), then log out and log in again, using your new userid and password. Go back to the "Admin" link and delete the "admin," "author" and "guest" logins.



------------------
JPD

For your email to people, look at:

http://www.gossamer-threads.com/scripts/forum/resources/Forum5/HTML/001189.html


Put this code at the top of the add_success sub. Repeat it twice to mail to two different people. If you need specific code and can't get it from the other topic we would need to know more information like where the email address is stored for the user, etc.

Cool, thanks JPD and Helpdesk... that should work great. I was sure that it was something simple but I just wanted to make sure that I had things right 'cuz the online order form is really important to have right 'cuz of all the personal info that's gonna be on it. How would I go about logging in as the admin if there is no authentication? Do I just link directly to the admin sub?

Thanks again for your help!!

------------------
Jason
Extreme mtb
http://extreme.nas.net

$auth_no_authentication = 0;

means there *is* authentication. You just log in as usual.

------------------
JPD

I got it working -- thanks!! 1 task done, 1 to go.


------------------
Jason
Extreme mtb
http://extreme.nas.net