My application (obviously) uses a unique ID to distinguish records. This UID is passed in URLs (e.g. ./examplepage.php?UID=$example_int), among other things.
While I obviously have server-side validation in place to make sure clients don’t access other clients’ data, is there a two-way encryption method I can use in PHP to only pass encrypted UIDs (e.g. ./examplepage.php?EUID=$encrypted_int), to further reduce the chance of anyone thinking “hey, what happens if I increment this integer?”
TIA.
Placing a hash next to the ID to ensure it’s security, or padding the ID with extra data, or even converting the ID to hex would all work fairly well I think.