News for hackers. Stuff that matters.

A comment on Mistakes Beginners Make When Working with Databases. Parent comment

Re:Mistakes Beginners Make When Working with Databases by horshod on Wednesday June 08, 2016 @12:52PM (#11863626)
I have faced this issue in my web application. My solution is to use a UUID wherever the ID will be exposed to the user (only one place in my application) and use an integer ID everywhere else. Although this does mean 2 IDs need to be generated and stored. The other solution is to never allow access to users without a log in.
[ Parent | on HN ]
Re:Mistakes Beginners Make When Working with Databases by naasking on Wednesday June 08, 2016 @01:57PM (#11864147)
You can avoid the need for two IDs if you HMAC the URL. There's a single private key on the server used to generate and verify the MAC on subsequent requests.
[ Parent | on HN ]