I am writing a database interface using PHP. One of the functions of the database is to allow members to login and register for events online. I would like to create a php file that would create a dynamic calendar file users can subscribe to. Something to the effect of http://www.hostname.net/my_calendar.php?memid=123. The file then will search the database for events member 123 has registered for and create a calendar file on the fly. My concern the security of using the members’ id number for this purpose. Is there a good way of accomplishing this with a reasonable amount of security, or may there be a security issue here that I am not considering.
Share
You can try hashing some of your user’s public details. For example, you can merge the user’s first/last names and his
user_idwith this method http://blog.kevburnsjr.com/php-unique-hash. That will generate a hash something likecJio3. Theuser_idwill be obfuscated. This won’t stop any hackers from getting in, but will slow them down. 🙂