Stopping people from brute forcing URL / UUIDs

Stopping people from brute forcing URL / UUIDs

El Forum
Guest

03-22-2009, 06:51 PM

[eluser]RS71[/eluser]
I hadn't thought of the IP ban on invalid IDs, very nice. I'd need non-sequential IDs for that to work nicely. Wouldn't encrypting the IDs need lots of processing power since for every item for every user viewing the site, I'd need to encrypt and decrypt IDs? I'm not too familiar with using base64 urls, what would be the benefit?

What do you think of UUIDs?

Messages In This Thread

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 05:32 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 06:15 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 06:23 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 06:29 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 06:51 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 06:56 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 07:28 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 09:44 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-22-2009, 11:06 PM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-23-2009, 05:20 AM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-23-2009, 09:11 AM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-23-2009, 09:21 AM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-23-2009, 10:25 AM

Stopping people from brute forcing URL / UUIDs - by El Forum - 03-23-2009, 10:33 AM