Of course I check the values and such when I need to. But for something like a "I forgot my password" system, I'd rather give them a "key" of a UUID then an integer.
On Mon, Dec 20, 2010 at 10:44 AM, Dave Watts <dwa...@figleaf.com> wrote: > >> If you are using it as an ID, I go with UUID. Makes it a little harder >> to put into the URL to look up things they shouldn't. > > If your applications allow people to substitute values and see things > they shouldn't see, you have bigger problems than integers vs UUIDs. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > http://training.figleaf.com/ > > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on > GSA Schedule, and provides the highest caliber vendor-authorized > instruction at our training centers, online, or onsite. > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:340170 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
