make url invisible!

[Anon]

I got this url:
http://www.whatever.com?value=2
but I don't want the "value=2" to show up on the url..Ive passed it from the previous page but for security reasons I don't want it to show up.
any solusion?!

Rooin.

[Anon]

Do you absolutely need to encode your variable in the URL (I understand that there are good reasons for this - I'm just posing the question)? Can you use a session? Or can you post your variables to a database table(probably the best since you can encrypt the value in the database)? Since I don't know what you're trying to do, I can't really give my opinion of what would be best.

[mrphantastik]

if you want to use a standard <A HREF="">... link, no. if you don't mind using forms - yes...

<FORM ACTION="$PHP_SELF" METHOD="POST">

<INPUT TYPE="HIDDEN" NAME="varible" VALUE="blah">

.....

<FORM>

the POST option kinda "Hides" the variable from the url & is accessable via it's $variable value in PHP.

Rooin wrote:

I got this url:
http://www.whatever.com?value=2
but I don't want the "value=2" to show up on the url..Ive passed it from the previous page but for security reasons I don't want it to show up.
any solusion?!

Rooin.

[tomhath]

Encrypting is best, security by obscurity is no security at all. Make sure you can tell if someone is spoofing by sending an encrypted value they eavesdropped somewhere. Do some research on the subject, its not that hard to do it right.