Custom Query (61 matches)

Vince has suggested that we hide mysql errors and produce some appropriate user errors, also have the page email the administrator when errors occur. I think this is sensible and will implement it.

Currently we have a function in security.php called atnf_staff() which tests the username against a hard coded list of names. This could be easily replaced with a query to see if the intitution was/contained ATNF, however institution is a free form textfield on the registration page, ie anyone could enter ATNF and get access to files newer than 2 years old.

Is restricting them to ATNF a legal thing? or would we want to give some people out there access?

I suggest, the only way to correctly restrict access is to have a field in users indicating if they have access to the new files, and to allow administrators the ability to grant that access, via a form.

Thoughts?

Add show/hide instructions just as they appear on the atoa site.