Re: Question about user management...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



At 10:20 PM -0700 3/10/08, Mike wrote:
Wait, what?

You are defining user role ids as MD5 hashes of UUIDs created from random numbers that change on every request?

Am I missing something or is this completely insane advice?

Mike:

What you're missing is that it doesn't matter. Each session generates one ID for each type of user.

It doesn't matter if the user comes back tomorrow and the actual number is different than it was yesterday. The point is that the number used for that user during that time is defined uniquely.

Granted, this is a little disturbing -- but my second suggestion to use a string is a little less disturbing.

Cheers,

tedd


--
-------
http://sperling.com  http://ancientstones.com  http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux