title: how to handle url modifications php/mysql
body: <p>I am having a problem in understanding the security issues with the following scenario.
  I have a site that has user registration and they can create events by logging in. If I am logged in as a user and i am in a url like <a href="http://abc.com/index.php?page=edit&amp;pageid=45" rel="nofollow">http://abc.com/index.php?page=edit&amp;pageid=45</a>. I am seeing this page after logging in other wise it will show the log in screen..but after logged in and if I change the url from
  <a href="http://abc.com/index.php?page=edit&amp;pageid=45" rel="nofollow">http://abc.com/index.php?page=edit&amp;pageid=45</a>
  to
  <a href="http://abc.com/index.php?page=edit&amp;pageid=567" rel="nofollow">http://abc.com/index.php?page=edit&amp;pageid=567</a></p>
  
  <p>I am able to edit that page..which is a security issue. how to handle this? is there a best way to handle any editing in the url? Please guide me. Or how can I handle this via scripting..by checking anything like username and it's association with the page id's?</p>
  
  <p>please guide me.</p>
  
  <p>I was thinking something like not showing the pageid variable in the url and somehow pass it as hidden from page 1 to page 2..but i don't know how to exactly do this or if it's a good solution at all.</p>
  
  <p>regards</p>