Welcome Guest, Not a member yet? Register   Sign In
CodeIgniter Forums Archived Discussions Archived Development & Programming Select id by md5??
Select id by md5??
  • El Forum
    Unregistered
  •  
#12
03-30-2009, 01:39 PM

[eluser]Aea[/eluser]
That works all fine and good until you want users to be able to access something, but they can't without having the ID in their session, chicken and egg. You could get around with a token system but that would result in a) in-usability since you couldn't link, b) me screaming.

Don't over-engineer the problem, you want to obscure URLs to:
a) Prevent Fishing Attacks
b) Knowledge of Size

Build or a key as proposed above or use an existing function like uniqid() to build a key for you. Both are a little bit deterministic when fully implemented (i.e. based off of time), but are random enough that it solves your problem. md5() is a non solution, nothing stops me from iterating through using md5's instead of id's.


Messages In This Thread
Select id by md5?? - by El Forum - 03-30-2009, 05:08 AM
Select id by md5?? - by El Forum - 03-30-2009, 05:16 AM
Select id by md5?? - by El Forum - 03-30-2009, 05:38 AM
Select id by md5?? - by El Forum - 03-30-2009, 05:44 AM
Select id by md5?? - by El Forum - 03-30-2009, 05:56 AM
Select id by md5?? - by El Forum - 03-30-2009, 06:40 AM
Select id by md5?? - by El Forum - 03-30-2009, 12:51 PM
Select id by md5?? - by El Forum - 03-30-2009, 01:21 PM
Select id by md5?? - by El Forum - 03-30-2009, 01:21 PM
Select id by md5?? - by El Forum - 03-30-2009, 01:30 PM
Select id by md5?? - by El Forum - 03-30-2009, 01:34 PM
Select id by md5?? - by El Forum - 03-30-2009, 01:39 PM
Select id by md5?? - by El Forum - 03-30-2009, 02:57 PM
Select id by md5?? - by El Forum - 03-30-2009, 03:06 PM
Select id by md5?? - by El Forum - 03-30-2009, 03:11 PM
Select id by md5?? - by El Forum - 03-30-2009, 03:13 PM



Theme © iAndrew 2016 - Forum software by © MyBB