Variable that dont work with GET....

[dima_dubin]

Hello,
I need to do a variable that when people will try to do this :
bla.php?variable=blabla
the $variable will not get the 'blabla'...

here is an example :

$id = 3;

mysql_query("SELECT * FROM bla WHERE id='$id'");

I need that $id will allways will be 3 so hackers dont do bla.php?id=44 or something like that.

can I do that ?

thanks !

[Anon]

If you set $id=3 in your script then it will always be "3" regardless of what is being passed in the URL. Is $id a variable based on user input?

[dima_dubin]

Hi,
$id is not user input, but when some users call the page this way : bla.php?id=444 the var value will be changed to 44 insted of 3
I remember that there is a way to declare a var that wont change his value.
How can I do that ?

thanks.

[dima_dubin]

I solved the problem by myself, thanks. :-)