Hide User ID's

[Steris56]

Please delete this thread

 

[Fillip H.]

How would this add security to a forum? If someone is in a position to run malicious code based on user id, why wouldn't they be able to look up the user ID based on the user name?


In either case, I'm not sure if this is entirely feasible to be honest, a lot of vB pages depend on the user ID in the URL to function properly.

 

[Fillip H.]

and how would they do that if the id was hidden.....

Because the user ID is stored in the database.

SELECT userid FROM user WHERE username = 'Steris56'

will return 1098 regardless if nowhere on the entire forum your User ID could be located by a normal member.
Thus, if someone has unlawful access to the database, they will be able to find your user ID and/or do any form of damage to your account even if they don't know your User ID.