If the ID is 114, chances are good that 115 is going to be valid, and
possible do something you shouldn't be doing (though that should be secured
through other means).  However if the URL is a UUID, md5 hash, or whatever,
the odds of changing it to a valid number is much smaller, as there will be
gaps in the series.  It doesn't make the app any simpler, but it does
accomplish something.

barneyb

> -----Original Message-----
> From: Raymond Camden [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, December 09, 2003 1:08 PM
> To: CF-Talk
> Subject: RE: Another simple question...
>
> But even if you encrypt it, someone can still change it. If your logic
> correctly handles missing and bad ID values, what is the
> point of encrypting
> it?
>
>
>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to