filenames or URLs, and reject all other inputs.
For example, ID 1 could map to "/login.asp" and ID 2 could map to "http://
www.example.com/". Features such as the ESAPI AccessReferenceMap [R.601.4]
provide this capability.