.net - ASP.NET membership using created UserId in query string -
hi learning .net , building first real website using .net.
i wondering if people considered ok use generated membership userid in query string? , use foreign key in database link relevant information user?
why need in querystring? provided by...
if httpcontext.current.user.identity.isauthenticated dim user membershipuser = membership.getuser() dim guid guid= directcast(user.provideruserkey, guid) end if
i wouldn't display such sensitive data users if wouldn't cause security issues, because application looks unsafe if can see more needs see. store temporarily in session pass page 1 page2.
if want save userid foreignkey possible use uniqueid provided membershipprovider.
if want use integer instead(readability, less disk space), have create table(aspnet_userid
) maps guid int-id in one-to-one relationship. create trigger inserts , deletes on aspnet_users
-table, example:
create trigger [dbo].[trgcreateuserid] on [dbo].[aspnet_users] insert insert dbo.aspnet_userid(fiuser) select userid inserted
and
create trigger [dbo].[trdeleteuserid] on [dbo].[aspnet_users] delete delete dbo.aspnet_userid fiuser in(select userid deleted)
Comments
Post a Comment