Why is it a problem if the URLs are guessable? In a vacuum, I would
consider that a good thing.

Remco Gerlich


On Wed, Jul 6, 2016 at 4:09 PM, 'davidt' via Django users <
django-users@googlegroups.com> wrote:

> I am looking for advice with regard to the following:
>
> I have a model which has as part of the structure these two fields
>
> job_id = models.AutoField(primary_key=True,)
> job_reference = job_id = ShortUUIDField()
>
> My question is if I include the job_id in the url, which is public facing
> then it is easy to guess the rest of the urls within the site.
> Beacuse there are a number of items that will have the same url structure,
> and are posted on the same day, using the id is what makes them unique.
>
> My questions are is this right way to proceed or is there a better
> alternative?
>
> Thanks in advance
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/caa61056-35de-4e03-b161-888631de9ccd%40googlegroups.com
> <https://groups.google.com/d/msgid/django-users/caa61056-35de-4e03-b161-888631de9ccd%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAFAGLK2bKOPA2q7e7LBttB3AjMxpwMXy8aJt6g3UAYVBA1CAHw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to