Open eurochriskelly opened 2 months ago
Users should not simply be able to enter an id in the url bar to get to their desired tournament. Aside from authetication, obfuscate the id by hashing a compound key and using 10 chars which are translated in backend.
e.g. /tournament/7b3dcf92a6
instead of /tournament/1
Users should not simply be able to enter an id in the url bar to get to their desired tournament. Aside from authetication, obfuscate the id by hashing a compound key and using 10 chars which are translated in backend.
e.g. /tournament/7b3dcf92a6
instead of /tournament/1