Development Tip -- uname vs name
"J. Cox" <[email protected]>
| Newsgroups | gmane.comp.cms.xaraya.knowledge-base |
|---|---|
| Organization | PostNuke |
| Message-ID | <[email protected]> |
In searching on a user, it is acceptable to use the uname for the string. This identifier is unique, and can be used as a search string for relevant information for the user. It is however not used for display information for the user. In some instances, displaying the user name could be used as a brute force attack on a website since logging in takes two vars (uname and password). You should not display the username, but rather use it as a system identifier. For displaying information about the user, use the name var. This var is not a unique var, but is a readable version of the user name. For instance, with my intranet, my system ident is bna0jcc. If I was to pull that over via ldap, bna0jcc would not tell me much about the me. However, the name var will tell the world that I am John Cox.