The I suggest you look at your programming style then, I have used
autonumbering with 80% of my data tables. And there is no way with my
methods that anyone can use your trick:-)
regards
Andrew Scott
Senior Cold Fusion Application Developer
ANZ eCommerce Centre
* Ph 9273 0693
* [EMAIL PROTECTED]
-----Original Message-----
From: tom muck [mailto:[EMAIL PROTECTED]]
Sent: 17 October 2000 01:20
To: CF-Talk
Subject: Re: SQL Server -> MS Access "Autonumber"?
> I second that. Mike - I'd be very interested in hearing your reasons as
to
> why you think it is bad practice to use Autonumbers. Have you had some
bad
> experiences with them?
>
> ------------------------------------------------------------------
> Andrew Ewings
It depends where you use them. A customer could, for instance, look at a
URL
and see CustomerID=459 and then change this to bring up someone elses
account. .
.Or go into a cookie and change a number, or a hidden form field. If you
use a
GUID or some sort of algorithm to create a unique ID you're much safer. I
use
Identity columns all the time, but only with non-critical data.
tom
----------------------------------------------------------------------------
--
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
