I am still pretty new to this but I had a similar problem.
You need to use the POST command to get the data posted and clean it if you are processing it in a query.
for example
$reply_id = mysqli_real_escape_string ($dbc, trim($_POST['rid']));
$topic_id = mysqli_real_escape_string ($dbc, trim($_POST['tid']));
Is processing data from my form below
<!-- Create the form:-->
<form action="forum_delete_reply.php" method="post">
<h3>Reply: <?php echo $rows['reply']; ?></h3>
<p>Are you sure you want to delete this reply?<br />
<input type="radio" name="sure" value="Yes" /> Yes
<input type="radio" name="sure" value="No" checked="checked" /> No</p>
<p><input type="submit" name="submit" value="Submit" /></p>
<input type="hidden" name="submitted" value="TRUE" />
<input type="hidden" name="tid" value="<?php echo $topic_id ; ?>" />
<input type="hidden" name="rid" value="<?php echo $reply_id ; ?>" />
</form>