Secure Way of sending argument from one page to another In my Drupal Page I have one l() function as follows:-

l('View Comments','admin/comments', array('query' =&gt; array('commentid' =&gt; $rinap_comm['record_id'])


So in this case I am passing the argument to new page 'admin/comments' using 'commentid'. The url will look like this:-

http://XXXX/someURL?commentid=15


In new page I will retrieve the value using 

$commentId= $_GET['addUser'];


This is all fine to get and set argument using GET function.
But I didn't find it secure way to transfer confidential information from one page to another as the value will get appended in URL which can be visible to everyone. 

Can anyone please suggest if there is more secure way of passing the information without visible to end user? If possible please brief me the steps.
You can symmetrically encrypt the data into a cipher before sending it, and decrypt it at the receiving page.  This will not stop anyone from seeing the encrypted data, but they will not have access to the encryption key and will therefore not be able to understand the data.

If the data to passed is short, the encrypted data can be passed in the URL.  To use an URL, just base-64 encode the resulting cipher so it can be represented by a string (and base-64 decode it at the receiving end to get back the cipher).  Remember to decrypt to convert from the cipher to the original cleartext. 

If the data is too bulky to fit in an URL, you may use a session variable to transfer the cipher.  Then you can skip the base-64 encode/decode step.  A session variable is not secure. However, just as with the URL, encryption will keep the data confidential.

Or, you can simply use pass the data using the database.  This requires you to create a very small custom module that associates the data with a token that does not give away any information (e.g. an integer).  You then pass the token by means of the URL, e.g.:

http://XXXX/someURL?tokenid=15


The receiving page then use this token to look up the data in the database.