Security
Database
Architecture
Last updated
1 year ago.
It should not be, if you are careful. Make sure you do not allow users to edit clients that are not theirs. Before edit or delete, check if that client belongs to the user that is making the edit/delete.
Last updated
1 year ago.
Yeah i've been sure to check that with $user->clients()->findOrFail($id); before any form of action.
I've also been thinking about composite keys as alternative method to this.
Last updated
1 year ago.
Your url should not be like : something.com/1/113/edit.
Rather clear like : someting.com/manager/1/client/113/edit
Last updated
1 year ago.
Sign in to participate in this thread!
Laravel
Laravel News
Laracasts
Laravel Podcast