title: How to prevent URL variables tampering in PHP?
body: <p>I am building a web app in CakePHP, authorized users can add, update, delete a record. In some controllers to add a record my URLs structure is like:</p>
  
  <pre><code>records/add/id_of_parent_record/secondvar:another_decision_dependent_value.
  </code></pre>
  
  <p>My concern is a user may tamper with these GET variables which would result in corrupting the whole record. I know i can use sessions for these vars, but I am looking for the best approach. Please share you knowledge and experience.</p>