Re: Generating unique session ids

[Rodrigo Gonzalez <rjgonzale(at)gmail(dot)com>]

I'm not an expert as you, but what about a small table where just one 
user can read and create the function with this same user and definer 
security?

Excuse if I say something stupid

Alvaro Herrera wrote:
> Tom Lane wrote:
>
>   
> > > * Any database user is most of the time able to read function
> > > bodies, so anybody who is able co connect to your database will be
> > > able to get your 'secret_salt' and then predict session id's.
> > >       
> > Yeah, it's not clear where to hide the secret.
> >     
>
> In a memfrob'ed (or something better probably) area in a C function?
>
>