User ID controlled by request parameter, with unpredictable user IDs 1 User ID controlled by request parameter, with unpredictable user IDs Dec 4, 2024