| Index
» Projects
» phpMyEdit
» Forum
» hide of url in the status line |
 |
gdickm
Joined: 06 Mar 2008
Posts: 4
Posted: 2012-02-27 19:52
Back to top
Reply with quote
|
Hello,
is it possible to hide an url in the status line of the browser like http://....php?id=12345.
So it is possible to see the id number and someone could suppose the next id.
I need something like "method post" within
$opts[’fdd’][’col_name’][’URL’] = ’http://...?id=$key’;
Is an other strategy possible to prevent an automatic mass download of data.
TIA
Gerd
|
doug
Joined: 10 Feb 2003
Posts: 1013
Location: Denver, Colorado (USA)
Posted: 2012-02-28 15:45
Back to top
Reply with quote
|
Given that browser functionality cannot be altered, you will probably need to either filter user access to specific record id's or else hack the class file so that id's appearing in links are encrypted when created and decrypted when requested.
Denying access to unauthorized records is safest and probably easiest to implement, using the filter option.
For example, individual pages in my content management system have a user level in the range of 0-9. Users also have a user level in the range of 0-9. The auto generated page navigation links will suppress the display of links when the page's user level is higher than that of the logged-in user's user level. Thus a page defined as user level 9 can only be viewed by users who have a user level of 9. Another page property is `mli` (must log in) which is used to suppress the display of certain pages if an authorized user is not logged in.
|
gdickm
Joined: 06 Mar 2008
Posts: 4
Posted: 2012-02-28 17:58
Back to top
Reply with quote
|
Hi Doug,
Thanks alot for your quick answer. I think that I understand your hints.
The page should be public! But I don't want, that somebody takes the url, by help of a program changed the id at the end and loads the whole datebase.
A good idea is to encrypt the id.
Nobody could guess the next id.
Can you help be with this hack? Are there already examples in the forum?
Additionally I only allow the call of the url within my program module. (referer...)
I also hack the class file so that a user only could see 1 page (15 Lines) at a time.
TIA
Gerd
|
doug
Joined: 10 Feb 2003
Posts: 1013
Location: Denver, Colorado (USA)
Posted: 2012-02-28 18:05
Back to top
Reply with quote
|
No, I can't help, it would be a daunting task and there probably aren't any examples. It might be easier to use UUID which is a MySQL function. Switch from numeric id to UUID ... MySQL's site is unreachable at the moment ... but perhaps a SQL query issued on a new field would generate unique strings to serve as the new identifier.
|
doug
Joined: 10 Feb 2003
Posts: 1013
Location: Denver, Colorado (USA)
Posted: 2012-02-28 18:06
Back to top
Reply with quote
|
http://kekoav.com/blog/36-computers/58-uuids-as-primary-keys-in-mysql.html
|
|
Post new topic
Reply to topic
|
|
|
|
Login
Registration
Slovak
