search

atk4 / ui

Robust and easy to use PHP Framework for Web Apps
https://atk4-ui.readthedocs.io
MIT License
440 stars 105 forks source link

`Multiline` control can delete unwanted records #1994

Open mvorisek opened 1 year ago

mvorisek commented 1 year ago

I found this when coding #1991

https://github.com/atk4/ui/blob/4.0.0/src/Form/Control/Multiline.php#L357

the IDs to delete must come from the client/UI explicitly, otherwise rows from another sessions will be deleted at best

mvorisek commented 1 year ago

multiline is one usecase, editing a field that has been edited in a different session should throw in general