quote:

---

>-----Original Message-----
>we have an on-line application which is a form to collect
>data from our client.
>
>For testing, I didn't set the write permission to a
>testing user to the web files directory, but it seems he
>still can write to the database.
>
>So does it mean we don't need to give write permission to
>the html or jsp file that has the form?
>We only need to set the user to have update permission to
>the underlying database?
>
>Thanks
>.
>

---