need advice

[FALCONSEYE]

Ok, I am supposed to create personalized URLs. The url is going to look like:

http://www.......com/?vw=123456

123456 is the customerid. However, I do not want people playing with the URL and viewing each others' information. So, I decided to encrypt the customerid. Methods like hash() or encrypt() are creating really long strings. It's not practical since nobody is going to type in more than 8-10 characters into the url. So, what should i do?
thanks in advance.

http://www.jetansolutions.com

 

[imstillatwork]

use UUIDs instead? they are not sequential...

store customer id in session or cookie, and NOT url? safer yet.

What is it used for?

Kevin

http://www.lot-o-nothin.com/cfml/

 

[FALCONSEYE]

The problem is they are sending out post cards via regular mail. What's UUID?

http://www.jetansolutions.com

 

[imstillatwork]

cfoutput: createUUID()
It's random, and you won't have a duplicate.

What's nice about it is that you can also use isValid("UUID",myVar)> to see if you still have a valid UUID - and if someone manually tampers with the value of the uuid (in a URL for example), it will virtualy always break the algorithm and no longer be a valid UUID, so you can check it that way too.

It's like univeraly unique identifier or something similar. I use it as a primary key index in user / member tables all the time because it makes it just that much tougher to mess with anything.



Kevin

http://www.lot-o-nothin.com/cfml/