Re: Passing URL parameters, how to hide

From:	Bastien Koert	Date:	Tue, 21 Sep 2004 15:22:32 +0000
Subject:	Re: Passing URL parameters, how to hide
Groups:	php.db
Request:	Send a blank email to php-db+get-36309@lists.php.net to get a copy of this message

Sounds about right...I would use the session variable for the user name so that is not even present...but that is the result that you want... Bastien

From: Stuart Felenstein <stuart4m@yahoo.com> To: Bastien Koert <bastien_k@hotmail.com>, holmes072000@charter.net, m.saleh.eg@gmail.com CC: jasper@velocity7.com, php-db@lists.php.net Subject: Re: [PHP-DB] Passing URL parameters, how to hide Date: Tue, 21 Sep 2004 08:17:43 -0700 (PDT) So what I did was this statement: SELECT * FROM Table WHERE RecordID = blue and UserID = red blue is the variable for the recordID red is the variable for the userID So now when I change either of those variables in URL no record is returned. Did I finally get this right ? Stuart --- Bastien Koert <bastien_k@hotmail.com> wrote:
When I
request "update.php?recordID=2", you should be
doing
something like "SELECT * FROM Record_Table WHERE recordID = 2 AND
userID =
3", ...............

_________________________________________________________________ Take advantage of powerful junk e-mail filters built on patented Microsoft® SmartScreen Technology. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.