3 ms·
What you found is called IDOR https://www.owasp.org/index.php/Top_10_2010-A4-Insecure_Direct_Object_References https://www.owasp.org/index.php/Top_10_2010-A4-In
by introvertmac 11y ago
What you found is called IDOR https://www.owasp.org/index.php/Top_10_2010-A4-Insecure_Direct_Object_References https://www.owasp.org/index.php/Top_10_2010-A4-Insecure_Dire...
- introvertmac 11y agoAnd yes sometime some startup deal with this very irresponsibly
- joshu 11y agoI have yelled at people for this for years. I thrilled to know it has a name. This is why the URL pages on delicious were md5'd and not the raw url_id.
- introvertmac 11y agoGlad, I helped you in finding a name
- joshu 11y agohttp://joshua.schachter.org/2007/01/autoincrement http://joshua.schachter.org/2007/01/autoincrement