RE: [PHP-GENERAL] PHP4

OK Thnanks for the advice ... my site will be account based, so they will need account code, account password and basket id. Do you think this will be OK ? Or have you got any other recommendations, have you got one of your sites I can go and visit ? Cheers -----Original Message----- From: James Lyon [mailto:james.lyon@aztec.co.uk] Sent: 30 May 2000 14:34 To: Chris Davis Cc: Php Mailing Ist (E-mail) Subject: Re: [PHP-GENERAL] PHP4 > Typical me, if I can over complicate something I will. I think you may have > just brought me on leaps and bounds in just a couple of sentences, cheers A business associate, Andy (hi if you're reading this!) has kindly just pointed out to me something I've taken for granted here ... When I use the unique ID, I lazily use an auto-incrementing integer. This isn't secure ... if you care about people hacking about and messing with other people's baskets, then you should randomize and/or encrypt the identifier so it can't be guessed. As it happens I use it in a situation where the security isn't an issue ... when the basket is taken to the checkout it's converted into a secure package using an entirely different approach over 128-bit SSL to be sure. Hope this helps, James.