Development Tip -- uname vs name

"J. Cox" <[email protected]>
Newsgroups gmane.comp.cms.xaraya.knowledge-base
Organization PostNuke
Message-ID <[email protected]>
In searching on a user, it is acceptable to use the uname for the string.
This identifier is unique, and can be used as a search string for relevant
information for the user.  It is however not used for display information
for the user.  In some instances, displaying the user name could be used as
a brute force attack on a website since logging in takes two vars (uname and
password).  You should not display the username, but rather use it as a
system identifier.

For displaying information about the user, use the name var.  This var is
not a unique var, but is a readable version of the user name.

For instance, with my intranet, my system ident is bna0jcc.  If I was to
pull that over via ldap, bna0jcc would not tell me much about the me.
However, the name var will tell the world that I am John Cox.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.