title: GET vs POST vs SESSION in Backend App
body: <p>Hi and thanks for your time. I´m developing an web app where my logged in customers will be able to watch video classes. Right now i´m using GET passing the information about the type of the videos through URL. For example:</p>
  
  <p>User 1 have MASTER COURSE ->>>> URL = curso.php?page=master</p>
  
  <p>User 2 have BASIC COURSE ->>>> URL = curso.php?page=basic</p>
  
  <p>You see, i think there´s a security problem here, because if user 2 type in his URL "page=master" he will be able to watch the videos that´s not allowed for him.</p>
  
  <p>So i´m writing a security check for each page, to see id that user ID can access the desired page.</p>
  
  <p>But i think it´s too much useless work. If i use the method POST on my Buttons, and submit the data via POST, would it be totally security to presume that a given user wont be able to see content that´s not suitable for him ? After all, the URL will be always the same, something like curso.php. </p>
  
  <p>And there´s the possibility of using Session, but can i define a Session value with a submit button or something like that ?</p>
  
  <p>I know, i know, a lot of newbie questions, but that´s just my second back end system and i fill like missing a lot of security practices here.</p>
  
  <p>Will appreciate any help or tips.</p>
  
  <p>Thanks a lot and sorry my bad English.</p>