How to get relations between tables with the ids?

[tomy]

What would be a good and secure concept to put the id from one table to the other?

Do I use a hidden field in a form for saving the id sombody is able to modify the number, do I use session even sombody will be able do steel the session.
This process I need if I dont insert the id in all nessary tables at once. So the same id will be insert step by step if somthing else need to be insert in a table.

I could insert the id in all tables while inserting it in the table where the user_accound and password is written.

Which concept is secure to identify a user and a row to a user? How do you do this basic process?

tom

[sid]

well, the id has to come from SOMEwhere. the least secure approach is for sure the form field or actually a querystring id (i have seen the latter on a evaluation application of one of my university departments before...).

stealing the session is not quite as easy but also can be done. i would store the id in the session or a cookie. i assume a user has to be logged in for your form to be accessed? store the encrypted password along with the id. then, before posting the content to the database, check if the id and corresponding encrypted password match - if that's the case, you should be good to go.