# Finding and fixing insecure direct object references in Python

DevFeed: [Finding and fixing insecure direct object references in Python](<https://devfeed.tech/articles/finding-and-fixing-insecure-direct-object-references-in-python-7975.md>)

Original publisher: [Read original article](<https://snyk.io/blog/insecure-direct-object-references-python/>)

Author: Keshav Malik

Published: 2023-07-19T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Security](<https://devfeed.tech/topics/security.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [acquisition](<https://devfeed.tech/tags/acquisition.md>), [api](<https://devfeed.tech/tags/api.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [contentlab](<https://devfeed.tech/tags/contentlab.md>), [developer](<https://devfeed.tech/tags/developer.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [web](<https://devfeed.tech/tags/web.md>)

## AI overview

This article explains insecure direct object references (IDOR) in Python applications. It describes how missing authorization checks can let attackers access or modify sensitive objects, files, or user data, and outlines common IDOR patterns, including blind IDORs and guessable identifiers.

## Source excerpt

In this post, we'll review common patterns and types of IDOR vulnerabilities and how to protect against them.