[rt-users] Leaking sensitive information

[Robert Spier]

At Mon, 20 Oct 2003 07:46:27 +0200,
Dag Bruck wrote:
> Is there a way to assign "random" ticket ids? 

Not out of the box.  And not without a lot of work.

> If not entirely random, to use a random increment?

(mysql solution.. postgres solution is equivalent, but looks different.)

You could have a program run once in a while and increment the
AUTO_INCREMENT id field in the Tickets table to some random number
above your current MAX(Tickets.id)

ALTER TABLE Tickets AUTO_INCREMENT=<new number>

Just remember, when you hit Ticket ID 2147483647, you will have
issues.  So make sure you're not going to get that high with your
additional increments.  (That's one ticket a second for the next 68
years, or so.)

-R (who almost suggested creating the id field as an UNSIGNED INTEGER
in mysql.)