Personalised Deeplinks

Deeplinks need to be personal for profiles. For example, if a user profile is called “Adalo” the deeplink should be www.example.com/adalo

I would also like to see this feature as it would allow me to create deep links using fields other than the row’s ID. Allowing for a field to be selected as the reference data for the URL link would be awesome. I have been thinking about this for a while. It would increase my site’s security to allow me to make certain links using a UUID field instead of allowing other users to guess the links by just typing in a random ID number.

1 Like

That’s a great point. @james.crennan the deeplink as it currently stands lets users guess other profiles by changing the ID number in the end. It would be really helpful if deeplinks were personalised e.g. www.example.com/adalo instead of www.example.com/pro_profile1 to use a random example. When can this be implemented, James?

1 Like

@njimmy10, what are your thoughts on this?

(Welcome to the community @zackdent! :tada:)

Dilon has already tagged Jimmy, who architected and built our deep linking. He’s currently elbows (and shoulders) deep in the AI Builder, but he’s the one to comment on adding that.

Thank you for the suggestion!

2 Likes

No problem. Hope we hear from @njimmy10

Hello everyone,

Going to a screen from a link with data is definitely available, it’s not in a format mentioned such as https://example.com/user but https://example.com/profile?user=xxx

Please refer to this help: Deep Linking With Data | Adalo Resources and https://www.youtube.com/watch?v=56YH9mrEwMc

Please let me know of you have other questions.

As James mentioned, we’re deep into AI, don’t forget to sign up for beta

HI Jimmy thanks for responding. We’re aware of the present deeplink format. Myself and other users are expressing our concern that with the current deeplink format, other users can easily guess other user profiles by simply changing the ID number at the end of the link. This is not secure at all. I fully appreciate you’re very busy working on AI at the moment but I would also appreciate this deeplink feature because it is essential for security and for our clients to feel that links are unique and reflective of their profile eg example.com/adalo if a user was called adalo. Any idea when this might happen?

The deep linking feature can only be used with unique properties in the Users collection and, currently, the only unique properties are ID or email. “Username” is a normal text property - like “Full Name” - that can have the same value for different users, so it’s not feasible to create a unique link.

I have to strongly disagree with the idea that using IDs is the only feasible path. In fact, using IDs for deep linking is a major security and privacy risk known as an IDOR (Insecure Direct Object Reference) vulnerability.

If we use sequential IDs in our URLs (e.g., /profile/101), any user can simply change the number to /102 or /103 and ‘scrape’ our entire database or view private profiles they shouldn’t be targeting.

Also every major platform (Instagram, X, LinkedIn) uses usernames for a reason. Using /user/394857 looks like an amateur technical error and exposes our user count. We need a Slug-based system using usernames to ensure the app is secure, professional, and user-friendly.

This is a standard requirement for a professional platform. I know you guys are busy but please note this deeplinking issue is of great importance for our security @james.crennan @njimmy10

1 Like