Re: [PHP4BETA] hidden variables !<form>

Well, I can tell you that following your philosify of not using 'get' method variables and or cookies you should also not use 'post' method either. If security is a concern for you then you should only use them as a sesion ID at most and back that up with some other Identifier. The reason is that 'post' method using hidden fields are just as vulnerable to manipulation as 'get' method. Fewer people will try it but it all just depends on how secure you want it. Storing variables using hidden fields are still stored by the browser and transmited to the server just as cookies are, and thus still subject to end user manipulation.