title: What is the best way to wait that an administrator validate something before comitting it?
body: <p>I'm building a web application where several groups have their own page but if they want to modify it, an administrator has to validate it before.
  For example, can change to change its logo, post new photo, change their phone number, their name, their location etc... Basically they can edit a value in the database but only if the administrator accepts it. The administrator has to validate every modification because... our customer asked us to.</p>
  
  <p>That's why we have to create a system that could be called "<em>pending queries</em>" management.</p>
  
  <p>At the beginning I thought that keeping the query in the database and executing when an administrator validate it was a good idea, but if we choose this option we can't use PDO to build prepared statements since we have to concatenate string to build our own statement, wich obvious security issues.</p>
  
  <p>Then we thought that we should keep PHP code that calls the right methods (that use PDO)  in our database and that we will execute with <code>eval()</code> when the administrator validates it. But again, it seems that using <code>eval()</code> is a very bad idea. As says this Rasmus Lerford's quote : <em>"If eval() is the answer, you're almost certainly asking the
  wrong question"</em>.</p>
  
  <p>I thought about using eval because I want to call methods that uses PDO to deal with the database.</p>
  
  <p>So, what is the best way to solve this problem ? It seems that there is no  safe way to implements it.</p>