Re: [PHP4BETA] hidden variables !<form>

Well, I can tell you that following your philosify of not using 'get'
method variables and or cookies you should also not use 'post' method
either.
    If security is a concern for you then you should only use them as a
sesion ID at most and back that up with some other Identifier. The reason
is that 'post' method using hidden fields are just as vulnerable to
manipulation as 'get' method. Fewer people will try it but it all just
depends on how secure you want it. Storing variables using hidden fields
are still stored by the browser and transmited to the server just as
cookies are, and thus still subject to end user manipulation.