Post value when clicking on a link

giannisptr

i have a table each row having a link to another page.
What i want is depending on the link that was clicked, to pass to the other page a different value (for example to pass the text of the link).
I don't want this value to be visible in the url.

Is there a way to do that in php???

Thanks.

laserlight

My suggestion is to just make it visible in the URL. If you really want to 'hide' something, do so via session variables or a database.

giannisptr

Session variable is another solution but how can i set a session variable when clicking on a link?

laserlight

I do not think you can, but you can pass some code that can be processed in place of what you want to hide.

What is the data that you wish to send, anyway?

EDIT:
Oh, I think I missed your example ("text of the link"). If the text is short, using the query string should work fine. For longer text, you could always use a button styled to appear as a link, I suppose, and thus use a form to send by the post method. Or you can try the "code" method I meant, where you basically map say, a numeric code to whatever data you wish to use.

giannisptr

I wish to send and ID based on which some data are presented in the next page.
I don't want to pass it via URL since anyone could then add randomly an id in the url and read data that should have not access to them

ldndude

Is there a login that they need to do before they see these links? are the id's belonging to people or pages?
one method is the 'secret variable and session' trick where your links are like link1.php?msc=d92kd4
when clicked they are directed to link1.php which (using if statements or cases) will 1) set up a sessionvariable with the proper id number and 2)redirect them to the correct page, which we will call 'success.php'
success.php will doublecheck the id in the sessionvariable and if the id is valid it will destroy the variable and show the contents of the page or if not true, destroy the variable and send them to a 'sorry, not for your eyes' page.
What this means is: If they try to meddle with the code, they will have to do it from the page where the link originated from, and not many people will try the combinations if they are jumbled as '9m38sn3'.
This is STILL not considered the securest way since brute force can still be applied, but without a login...you can't differentiate between guests and guests.

bradgrafelman

giannisptr wrote:
I don't want to pass it via URL since anyone could then add randomly an id in the url and read data that should have not access to them

There's two problems this statement presents:

Your application has no security, but rather than fix this you're simply trying to work around it and avoid this problem.
POST'ed information can be tampered with just like information passed via the query string can.

I would say you need to fix the security issue first, and then it's a simple matter of passing the ID's via the URL.