Skip to main content

New answers tagged

1 vote

Should order numbers be guessable?

In addition to the answer by Gh0stFish, although this is not primarily a security issue, it's also worth noting that your mechanism has a very high probability of generating collisions (i.e. 2 orders ...
symcbean's user avatar
  • 18.7k
14 votes
Accepted

Should order numbers be guessable?

I would advise against your system, also. The importance of unique order numbers in an e-commerce environment has not changed. I am no security expert but can spot several instances of where having ...
security_paranoid's user avatar
16 votes

Should order numbers be guessable?

It depends whether you're ever relying on the order number being secret. For instance, do you use it as part of the authentication process if a user contacts your customer service, or do you display ...
Gh0stFish's user avatar
  • 12.9k
22 votes

Should order numbers be guessable?

This led to curiosity, is an order number that important as it was years ago where it must be unique? What could be compromised and how? What could bots achieve as they can't make payments? The ...
Steffen Ullrich's user avatar
0 votes

Unusual GET Request

You could always set up rules for the server to always refuse incoming requests to your server, or, as you mentioned, you want to set up a honeypot you could use a proxy or some sort of application-...
Paebak's user avatar
  • 1

Top 50 recent answers are included