PHP and explorer address bar

[dwlerwill]

Hi all

I'm making a project in PHP and it is all going well except one small problem I am getting.

I have various buttons on my pages and when there are clicked the button code is shown in the address bar like this

http://www.xxxxxxxxx.co.uk/npccombatresult.php?ID=$userstats3

[character_name]

is there any bit of code to hide the ID=$userstats3[character_name] bit as it seems a bit unsecure with it there?

thanks all

David Lerwill
"If at first you don't succeed go to the pub"

 

[jpadie]

if you need to transfer the userid from browser to server there is no simple and decent way to hide it from the user.

you can obfuscate it by placing the value in a form and POST'ing it. that way a client would actually have to look for the ID.

if the ID is always the id of the client, then consider storing the value either in a session variable or in a cookie.

if the ID is effectively a filter a parameter or the like, and you still want to obfuscate it (and you really really have to) then consider tying one time TAN's to each ID and storing the mappings in a DB.

if i've completely misunderstood your post ... sorry!