# About id in the url

**URL:** <https://www.ruby-forum.com/t/about-id-in-the-url/132436>\
**Category:** Rails\
**Created:** [March 20, 2008, 4:40am UTC](https://www.ruby-forum.com/t/about-id-in-the-url/132436 "2008-03-20T04:40:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![daociyiyou](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/0ea827/32.png) [@daociyiyou](https://www.ruby-forum.com/u/daociyiyou)\
**Post date:** [March 20, 2008, 4:40am UTC](https://www.ruby-forum.com/t/about-id-in-the-url/132436/1 "2008-03-20T04:40:13Z")

</div>

Hello:  
I have codes to identify the user when an user try to modify the  
database using id.This is useful for preventing others to modify a  
user’s data.But after a registered user login,he can still modify the  
data that has been saved to the database sometime ago by inputting the  
url containing id in the browser.How do i prevent displaying id in the  
brower so that user can not see the id and modify the database by  
inputting url in the browser?

---

<div class="post-metadata">

**Author:** ![daociyiyou](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/0ea827/32.png) [@daociyiyou](https://www.ruby-forum.com/u/daociyiyou)\
**Post date:** [March 20, 2008, 11:33pm UTC](https://www.ruby-forum.com/t/about-id-in-the-url/132436/2 "2008-03-20T23:33:49Z")

</div>

Mmmm. The better solution to your problem is called authentication.

On Mar 19, 8:40 pm, Guo Y. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)