Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How do I stop people from knowning how many users I have.How do I stop people from knowning how many users I have.
Previous
 
Next
New Post
1/29/2007 7:24 PM
 

I still don’t get why DNN decides to allow a user know his / her own user Id therefore the size of the membership base, and anonymous to know whether a particular user ID exists.

This is my own profile page.

http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/ctl/Profile/UserID/XXXXXX/Default.aspx

Nice, this is my user ID number in the URL and I know there are at least XXXXXX people signed up with this website.

If I simply change my user ID, without loggin in, and paste the URL into IE’s address bar. Sometimes I get “this account does not exist” error.

Why do you guys allow an anonymous user to have the knowledge of whether a particular user ID exists?

 

 

 
New Post
1/30/2007 8:46 AM
 

If you want to you can make this number more obscure by going into the User table and changing the Identity Seed and Identity Increment numbers for the UserId field.

e.g. make your Identity Seed some large prime number (not too large), then make the Identity Increment a small prime number like 3, 5, 7, 11, 13, 17 ...

This will also help with the fact that the user verification codes are composed of the portal number and the UserId.


DotNetNuke Modules from Snapsis.com
 
New Post
1/30/2007 11:51 AM
 
You can take a look at our User Attributes product (www.ucanuse.com). The registration, profile, and email can all be customized. It wasn’t designed specifically to obscure the user id from the end-user but you may be able to accomplish that with our module. Asside

Qualtiy DotNetNuke modules and custom development; we've been serving the DNN community for over 2 years and have hundreds of satisfied customers. Let us serve you today.
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How do I stop people from knowning how many users I have.How do I stop people from knowning how many users I have.


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out