Welcome Guest, Not a member yet? Register   Sign In
Anyone validating URLS passed to your app???
#1

[eluser]mindprojects[/eluser]
Hi guys!
I was wondering if anyone has used before some kind of url validation in a web app,as such as appliying an md5 string to the url to validate the url itself avoiding a user to modify it hand by hand.

Suppose we are editing a post(id is 10) belonging to a user 'Pippo' passing the url:

http://myapp/post/edit/10;

I want to avoid that a user can modify this url appending the id of another user post.
Obviously i should che it in my edit function,if the user can edit this post,but,why not appending an md5 string to the url itself,where the md5 = md5(uri string + my secret)?

The result url would be:
http://myapp/post/edit/10/mdf3fef443fwerw....(32chars)

Is it a good idea?
Thanks guys,any suggestion?


Messages In This Thread
Anyone validating URLS passed to your app??? - by El Forum - 11-05-2008, 04:56 AM
Anyone validating URLS passed to your app??? - by El Forum - 11-05-2008, 06:14 AM
Anyone validating URLS passed to your app??? - by El Forum - 11-05-2008, 06:39 AM
Anyone validating URLS passed to your app??? - by El Forum - 11-05-2008, 07:56 AM



Theme © iAndrew 2016 - Forum software by © MyBB