PHsPeed forums
What is the best way to set a predefined query to limit search results?
-
I'm currently rebuilding my application that was build in a Brazillian product
To limit results based on security, like a department tree, I had to add a where with a global variable to the SQL to achieve that goal. It worked, but it is quickly forgotten. What is the best way in PHsPeed to achieve something similar?
-
The dbTable has a fixedfilter property. Here you define the query that should always apply. It is appended to the query in all cases.
-
Be aware that the fixedfilter property is not dynamic, if you require to filter based on user permits, department, etc. You'll need to change it at execution time by using either of the dbtable available methods.i.e.
$dbtable->setFilter('idfield = ' . $somevalue);
You can commonly do this during the
OnCreate event of the dbtable.
Hope this helps -
Actually setFixedFilter. The filter and subfilter properties are also used internally, where FixedFilter is never changed by PHsPeed itself.
-
Hi, Jules, I'm too using a Brazilian product for an app that does something like yours: It filters the records shown for each user, depending on the "farm" he or she works at (my app got the info from a table when the user logs in)... I also use a global variable in the queries to filter the data.
But I'm thinking of migrating this app to PHsPeed and I was curious of your progress...
Regards, -
The fixed filter is especially meant for purposes like this. As it is always applied over a query, even select * will be filtered because of the fixed filter. The limitation to fixed filter is that the end user cannot manipulate it by entering some kind of weird query like there are hacks who allow that. PHsPeed has many security measures, but as fixed filter cannot be manipulated by the regular PHsPeed functions (except by setFixedFilter function) you can set the filter that always needs to apply to this value.
Example:
- on login select the farm id and save it in the session space (setSessionVar('myFarm', "myfarm='".$myVar."');
(the where clause will be appended, result could be: myfarm='12'- in the onCreate event of the Form, set the fixedFilter (setFixedFilter("myfarm='".getSessionVar('myFarm', '1=0');
The 1=0 will cause the query to give no results when no valid farm is available.Hope this helps.
Chris.
