camner erk..
bila kite pass query, sometimes..
ada orang edit query kiter n bole tengok data lain...
so any solution to hidden link or encrypt it?

- Do not use query string for important data. Use query string for common purpose that will make no effect to your data only. Example: search string
- use POST, instead of GET
- use session (?)

__________________
LiewCF | Malaysia Bloggers Forum

i already use season to authenticate user access level..
n its working well..
but for the same level...
they can change the query n access other user page...
by changing query for user ID
but if they copy n paste to new page (browsser) ...the session will work..
n they can't access the page...
so any solution to avoid them to change qquery at the same page as they logon..

talk about user authentication first...

it is best to have a file that checks the user's access level on every page that requires higher user level.. just include it in every file...

like what lcf said, if u need to pass an important value, use post method... then everything will be invisible to user...

err, i used to keep the user ID in a session variable... and also their access level... i dunno if there are better ways to do this... but certainly not querystring...