Change Profile ID?
-
Right now, in ver 1, my profiles come up as such: profile.php?id=3. If a spammer is able to register, they can move through everyone’s profile by just sequentially moving through the numbers. Some numbers will not exist as the user was deleted.
They can actually do this for profile names too. So if a spammer registers on your site, like one of your latest, Nike101NFL, all they have to do is punch in a particular user name in to the profile url, and they can see everything, but can`t see the email address. So how do I protect my users?
- You must be logged in to reply to this topic.
