Variables in the URL

[Anon]

Can I hide the variables inside url?

My code is similar to the following:

if ($permet == 1)
{
$Msg = "You dont have permission";
header ("Location: error.php?msg=$Msg");
}

When I am redirected to the page error.php, I get the following URL inside the address bar:

.........../error.php?msg=$Msg

And anybody can change the value of $Msg, so How can I hide variables ???

Thx..

[fitzbean]

Why not include the msg in the error.php and just pass it a # which determines which message to show?

[Anon]

It depends on the design of your scripts. What I generally do is instead of redirecting to error.php, is I include() it and call the error function in that script, passing it the message.

For example:

error.php:

function raiseError($msg) {
print "Error!! $msg";
exit();
}

index.php

if (somethingbad()) {
include("error.php");
raiseError("Something bad happened");
}

Diego

[greg252]

I just did the same thing as Diego except a bit easier !?!

if (!$allowed){
include ("error.php");
}
else{
include("message.php");
}