Should I be obfuscating database IDs from my users?

Question

I\'m being told that I shouldn\'t be using database IDs directly in HTML code in web applications.

Currently I use the IDs on things like table row IDs (tableRow-454 whe

Answer 1

No, you're just making extra work for yourself.

As long as you're doing enough testing that changing an ID here or there won't give the users access to something they shouldn't then you're fine having the IDs visible.

In some situations it can be beneficial to hide them or have non-sequential numbers, or maybe not starting counting from zero. For example if someone got order number 3 they might start asking questions...