I'm looking for a script to use at least as a starting point for a club's membership database.

I want an admin to be able to have all privs. I will have the admin import the existing db.

I want each user to be able only to see/update their own info.

I can think of no safe "key" other than assigning each person a #.

Each db record will represent one member, who is also a user.

How can I create a password entry for each user? I assume that is stored in the db.pass file, and NOT in the db? So far it would appear that I'll need to create a default password (by hand/additional script) for each user as they are added to the db.

If a user logs in, I want them to see their record, and only their record. It would be nice to do this w/o them having to do a search. I suppose if nothing else I could change the log-in url to be a function of their u_id and return that search automatically?

Not that the info is all that sensitive, but I'm also wondering how much protection there is in the way the URL is constructed, so that once a user logs in, they can't just change a record #. In my brief test so far, I'm not clear where the record owner info is stored (unless its the 2nd field in the db?)

Anyway, hopefully that paints enough of a picture of what I'm trying to do.

Very much looking for advice as to how well dbman is suited for this task, or how much hacking I would have to do. (or if someone knows of something better suited).

I'm quite comfortable hacking away at perl and dbs, just hoping to start from a script that is already well suited to the task.

Many thanks,
Mike