[Tickets #6692] Unguessable URLs

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6692
-----------------------------------------------------------------------
 Ticket             | 6692
 Created By         | Chuck Hagenbuch <chuck at horde.org>
 Summary            | Unguessable URLs
 Queue              | Jonah
 Type               | Enhancement
 State              | Accepted
 Priority           | 1. Low
 Milestone          |
 Patch              |
 Owners             |
-----------------------------------------------------------------------


Chuck Hagenbuch <chuck at horde.org> (2008-05-12 16:28) wrote:

Right now, the URL to unpublished articles can be guessed by incrementing
the story_id. It'd be nice to allow hashing it instead, either with a
configured secret or by using the published timestamp too. Some sort of
HMAC, etc.