Hello,
I would like to build a dynamic form builder using asp.net with jquery and a sqlserver as backend.
The approach I wish to use is to modify the table structure based on user request so I have a database which is structured as one would normally store data in sqlserver i.e. mostly a single table (barring consideration of sub-tables for the sake of a simple example).
Lets say for example I have a client who wishes to build a feedback form. 1. They create a feedback page 2. They create a new "data form" control which they can insert into this page in the admin area 3. They add fields for "your name", "your comments", "your email address"
I would then be very careful to filter user requests before using the form submission to create a table (named after the form perhaps) and the field names provided by the user. I.e. dynamically changing the table structure e.g. via custom stored procedures with perhaps alter table statements.
Now what I want to get from you guys and gals out there is how feasible this is, in the real world.
I appreciate your collective wisdom!
Comments relate perhaps to:
-- Security
-- Performance
-- Likely problems
-- Is it the best way?