I am trying to build a method for passing customerids by query string. I want to come up with a method that does not require storing unique dictionaries of valid data in user sessions to check against anytime links are clicked. I came up with the following after some reading and would appreciate feedback, especially if I've missed something and this is completely insecure. Also, I'm looking for a method that significantly increases difficulty, but may not remove risk altogether.
Basically default.aspx will print href tags to the browser by this sort of logic (from original_type to bytes, encryptbytes, to base64, urlencode):
from_db_customerid=34059;
String.Format("/Customer.aspx?customerid={0}",EncryptIntegerForURL(from_db_customerid));
public string EncryptIntegerForURL(int v ...
Go to the complete details ...