I want to validate some querystring parameters such as the ID of a user which is a number and which could be appended to a url.
I want to be able to verify that a user is not just tempering with my url's by iterating thru all the number possible etc...
Using users as example:
So I figured that in my User's table next to the ID field which is type (long) bigint, I would have a string field and in it I would insert a ramdomly generated string (as a verefication value) of either numbers or letters or a combination of both and that each time I need to put a user ID on a url's querystring I could also append the verification string from the database ex: domain.com/default.aspx?uid=5678&vid=454li23ij32k
when I receive a request with a user's id in the querystring I would also check for the verification string in the querystring and validate it in the database to know if the request is legitimate.
All this here to ask: How do I generate ...
Go to the complete details ...