leegodden

It worked, and thanks to all who took time to comment on this question, much appreciated

Hi I am hoping to test this now with a hidden field using Post something along the lines of: <input type="hidden" name="myFieldName" value="<% = price %>" /> and in the receiving page: $val = $_POST['myFieldName']; Does this sound workable?

The trouble is with this is that the value is passed from a .erb file in ruby to a php script, and I dont think this is possible with sessions

it;s triggered from a hyperlink

No really, am trying to avoid those

HI I have a query string along the lines of: <a href ="http://localhost/mypage.php?var='total'">Click me</a> The thing is the 'total' part of this query string is not fixed, it is determined on another page by a users selection of prices. When the link is clicked and the page is loaded the string reads something like: http://localhost/mypage.php?var='12345 How can I validate that the user has not altered the URL to something like: http://localhost/mypage.php?var='11122