MyBB Community Forums

Full Version: Should UIDs be kept secret?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi guys,
Is there any reason a user's UID should not be visible to the public?
I'm making a site where users submit article for the newsletter, and the url to the page where each user's articles that they have appear is /articles/UID/ARTICLE-TITLE.
You should be fine showing them. The UID is just the User's ID (which you probably knew) and is in the profile URLs.
Ok, thanks.
The only thing I can think of that some people like to do to hide UIDs is use another account as their admin account that isn't uid=1, make the username of their new user look like a usual account, and give the account that 'looks' like an admin (uid=1 and green username) no admin permissions, if you see what I mean. That way if an attacker tries to get access to uid=1 they won't have any admin permissions.