Here is a CFLOOP of 5 UUIDs built using CreateUUID():
6505F7E0-D2E1-11D4-B17000E0295FC366
6505F7E1-D2E1-11D4-B17000E0295FC366
6505F7E2-D2E1-11D4-B17000E0295FC366
6505F7E3-D2E1-11D4-B17000E0295FC366
6505F7E4-D2E1-11D4-B17000E0295FC366
Care to guess what the sixth run of CFLOOP produced?

Now, here is a CFLOOP of 5 UUIDs using CF_UUID:
09776555-09DA-E1DA-E1DA-D81ECBA988E8F77F
BF662FEC-A7C6-AE08-9E08-9E087421FE4C2BA2
6CA0A744-44F4-44F4-3B37-3B370B8854A18EF6
09DE61D9-0923-E123-E123-D876C51CB8D6C329
CF0D2A51-A70D-AE61-9E61-9E64A1B72F4B176E
Care to take a crack at the sixth iteration of the CFLOOP? Hah!

Now, consider the following: If you stuff a UUID into a URL as a security
token for selecting user sessions, shopping carts, or whatever, wouldn't you
like to know that somebody is going to have to do a LOT of work before they
get lucky with a URL hack?


Alan McCollough
Web Programmer
Allaire Certified ColdFusion Developer
Alaska Native Medical Center

> -----Original Message-----
> From: Erik Voldengen [SMTP:[EMAIL PROTECTED]]
> Sent: Friday, December 15, 2000 11:11 AM
> To:   Fusebox
> Subject:      RE: inserting your own UUID into a db table
> 
> Why does it matter if only three or so characters of a UUID 
> are unique?  As long as they are indeed unique, who cares?
> 
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to