Re: Passing URL parameters, how to hide

From: "Stuart Felenstein" <stuart4m@yahoo.com>

I still want to pass the id's through hidden. So the html in the first form looks like this: <input name="hiddenField" type="hidden" value="recordID"> <input name="hiddenField" type="hidden" value="user id"></td> Form is set to post.

Why would you pass UserID in the form when you turn around and pull it from the session in your code? It's a waste. Also, with the above, if I were to change UserID to 5 (assuming that a valid userID) and recordID to 20 (assuming that's a valid recordID that userID 5 has access to), would I be able to see the record? I shouldn't be... ---John Holmes...