Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I am creating a simple web application.
Is it wrong to identify user by it’s user name even in the application low level?
For example, say I have a authentication token table that has three columns: token, userID, expDate.
Will it be wrong to put the user username in userID column?
Do I have to worry about the fact that everybody knows the user ID in my DB?
No, I don’t think there’s anything wrong with that particularly. I’ve seen that in practice at very big sites – just make sure that you have a unique constraint and index for that value (better, make it the primary key). Also, consider that using the username as their ID means you can’t let the user change their username later without breaking existing links (say, if your user shares their user page externally).