You know... for all that effort - you could always just encrypt the
url variables... or even encrypt a comma delimited list of values in a
single url param...

if the decrypt and then getting the values off the list fails, you
know it's been fiddled with..

Mark


On Mon, 28 Feb 2005 15:32:28 +1000, Jason Troughton
<[EMAIL PROTECTED]> wrote:
> Thanks for all the replies guys.
> 
> Have decided to do it a little differently.  As well as the id I am also
> keeping a random 4 digit number in the db.  I will now pass both the id and
> the random number through the url. On the receiving page I will test to make
> sure the id and random number belong to the same record.  If not I know they
> have played with the url variables.

-- 
E: [EMAIL PROTECTED]
W: www.compoundtheory.com
ICQ: 3094740

---
You are currently subscribed to cfaussie as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to