Comments on: Introducing JsTable

By: Outsourcing India

Outsourcing India — Fri, 16 Jan 2009 06:23:07 +0000

Hi,
Thanks. It helped lot, but in zend framework you can not assign the class in the .phtml file in should be in the Indexcontroller area.

By: Naneau

Naneau — Tue, 30 Sep 2008 12:39:27 +0000

My solution is made for a Zend Framework project. It is absolutely not suited for what you are describing, I’m very sorry.

By: eilowyn

eilowyn — Tue, 30 Sep 2008 11:38:48 +0000

Ok, I believe it maps to where the .cs are. But still I get undefined…

By: eilowyn

eilowyn — Tue, 30 Sep 2008 11:33:27 +0000

hello

i’m trying your solution in a .Net web project with:
- nhibernate
- activerecord on top of it
- your jsTable on top of it all

i’m already using prototype in my solution.

i’m testing it with your piece of code:

var mP = new JsTable(‘project’);
var rowset = mP.find(1);
//find returns an object of the class JsTableRowset
var row = rowset.current();
row.nome = ‘new name’;
row.save();

however, the return of mP.find(1) always returns me undefined.
debugging it, I see that you build the url with what’s defined in urlRoot and urlFind.

I’ve already changed the urlRoot, but to what should I map urlfind?? your solution does not have the folders you refer in your urlFind ‘jstable/index/find/’

where can I find your ‘index’ and ‘find’ folders?? Am I missing something?

tks in advance!

By: ivaxat

ivaxat — Sun, 13 May 2007 00:23:56 +0000

Hi My Name Is ivaats.

By: Naneau

Naneau — Wed, 18 Apr 2007 10:21:42 +0000

Thank you both. I have fixed the -> notation. When you try to prove similarities it’s easy to forget there really are differences between languages .

The security message should be really visible now.

By: Davey

Davey — Wed, 18 Apr 2007 05:30:47 +0000

Since when did JavaScript support object->property notation? Perhaps you meant to use object.property?

Otherwise, this is kinda neat, I’m all for consistent backend/frontend APIs, and whether you pass data from a form, or from an API such as this to PHP, it will always require validation and filtering, and when passed to the DB, escaping.

- Davey

By: Matthew Ratzloff

Matthew Ratzloff — Wed, 18 Apr 2007 01:28:52 +0000

I think you need to change your tiny security warning into a big fat red box above the download links, and a note not to link directly to the files (so all users see your warning). This has the potential to be extremely dangerous if not used properly.

That said, I can see some nice uses for it. I’ve added it to my del.icio.us bookmarks and might come back to it at a later date to investigate it more thoroughly.

By: Naneau

Naneau — Tue, 17 Apr 2007 23:21:18 +0000

Well, the point really is to be able to modify all data, like you would be able to do in php. The real question is, who should be able to edit what data. As for the lack of a delete method, I was planning on creating that next. I just feel it should be there. A user who has the rights to delete a row should be able to do it. As I have mentioned in the post, the security issues can be solved on the server, like they should be solved in any other application.

By: Greg

Greg — Tue, 17 Apr 2007 23:13:58 +0000

This looks interesting, but as you’ve mentioned, there are some pretty serious security issues that could show up if this were ever exposed on a publicly available site. Open up firebug and you’ve got yourself a query window where you can query for any data in a table and then modify it. At least you didn’t add a delete method to the row or expose full query capabilities! Interesting project though…