Isn’t that kinda dangerous though?
None of the info shown is private. And they will have no place on the site to change their info.
The PURLs are actually going to be sent out to a client list and they will show a homepage with different offers depending their client level.
And if the name doesn’t exist in the client list, they just get the non-personalized homepage.
And for anyone that cares, what I’ve decided to try is to actually modify the rewrite line in the .htaccess from this:
RewriteRule ^(.*)$ index.php?q=$1 [L,QSA,NC]
to
RewriteRule ^(.*)$ index.php?q=$1&usercode=$1 [L,QSA,NC]
The only page that will actually use the variable usercode will be the homepage
and I have set the Error page to be the home page.
So, if the usercode is blank, or "home", or a usercode that doesn’t exist in the database, or a plain old error, the non-personalized homepage will be served.
But if the usercode appears in the database... BAM -- personalized home page.
Yeah, it means that I don’t have a separate Error page... but this isn’t a big site and every page has a link to every other page, so it’s a tradeoff.