.net - ASP.NET membership using created UserId in query string -


hi learning .net , building first real website using .net.

i wondering if people considered ok use generated membership userid in query string? , use foreign key in database link relevant information user?

why need in querystring? provided by...

if httpcontext.current.user.identity.isauthenticated     dim user membershipuser = membership.getuser()     dim guid guid= directcast(user.provideruserkey, guid) end if 

i wouldn't display such sensitive data users if wouldn't cause security issues, because application looks unsafe if can see more needs see. store temporarily in session pass page 1 page2.

if want save userid foreignkey possible use uniqueid provided membershipprovider.

if want use integer instead(readability, less disk space), have create table(aspnet_userid) maps guid int-id in one-to-one relationship. create trigger inserts , deletes on aspnet_users-table, example:

create trigger [dbo].[trgcreateuserid] on [dbo].[aspnet_users] insert  insert dbo.aspnet_userid(fiuser)     select userid inserted 

and

create trigger [dbo].[trdeleteuserid] on [dbo].[aspnet_users] delete  delete dbo.aspnet_userid      fiuser in(select userid deleted) 

Comments

Popular posts from this blog

javascript - Enclosure Memory Copies -

php - Replacing tags in braces, even nested tags, with regex -