Hiding RecordID from the Browsers URL... Help!!

[Joe Science]

I am passing the RecordID after the user has logged in with email address and
password. When modifiying their profile the RecordID is passed and displayed
in the browsers URL. How can I prevent the RecordID from displaying so that
the user cannot modify the record by just typing in a different RecordID in the
Browser's URL.

[gclausen]

Use Session Variables instead of passing data in the URL.

[dempster]

If you want to pass the recordID through the URL, you might also pass an
additional parameter such as the first two or three letters of the email
address. Then when you go to display the record, you pull it up by recordID and
then make sure the additional parameter matches the appropriate field before
displaying. This limits random browsing of records.

-Paul

[jjsand28]

You could also try using a hidden field in a form. and referencing that in your processing page.