Posted by Toby A Inkster on 03/21/07 15:44

Aggelos wrote:

> The problem with that is that I expose the Customer Id wich can easily
> be changed to anything else.

Sign the ID number, and then check the signature at the other end. I posted
example code to do this a couple of months ago:

http://message-id.net/<2r0v64-o98.ln1@ophelia.g5n.co.uk>

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!

• Next in forum: Re: PHP, IIS, and ISAPI
• Prev in forum: accessing numerical array index in foreach
• Thread view: Re: Sending sensitive information to an HTTPS page

[Reply to this message]