Best way to hire parameters from user

[spoliskey]

Hi, I have a question on passing parameters via links. Lets say a user gets
a list of all invoice header records that he has layed out in rows of a table.
One of the cells in the row is a link to the invoice detail for that header. I
would put a link to the .cfm page that displays the detail, say like this
viewinvdetail.cfm?invnum=987987 Now, normally I would combine that with a
session variable in my query in order to prevent people from displaying
invoice's that are not theirs by just entering in different invnum's on the
browser address bar. Now lets say this isn't possible for a particular query.
what is the best way to 'hide' the parameters from the user? I can use the
encrypt and decrypt functions but I am wondering what the best practice to do
this with? Thanks in advance!

[kyle969]

encrypt/decrypt should work well, you could also generate a random string and
use it as a primary key in a table with invnum as a foreign key. I have used
that technique when the link was too long for a url, I just stored the values
in a table.

encrypt/decrypt is probably the easiest way tho.