Ways for browser to include page ID in query?

Question

Hello

I'm no expert on web development, and need to find a way to let the browser call a PHP routine on the server with the current document ID as parameter, eg.

http://www.acme.com/index.php?id=1

I then need to call eg. /change.php with id=1 to do something about that document.

Unless I'm mistaken, there are three ways for the client to return this information:

• if passed as argument in the URL (as above), it will be available as HTTP referrer
• by including it as hidden field in
• by sending it as cookie

I suppose using a hidden field is the most obvious choice. Are there other ways? Which solution would you recommend? Any security issues to be aware?

Thank you.

Answer 1

You can also POST the data so it won't be seen in the URL with ’form method = "post" ’

All of these methods are, to a point, insecure as they can be manipulated by a savvy user/hacker. You could https your site, limiting any man in then middle attacks. Be sure to check and validate incoming data

Answer 2

Ajax is another option as well, and it allows you to send that information without refreshing the page.

Answer 3

http://www.acme.com/index.php?id=1

The above url would be more "browser friendly" if you transform it into something similar to this:

http://www.acme.com/index/page/1

I am sure you can achieve this in Apache. Or Java Servlets.