[SOLVED] rating script - passing id issue

[avillanu]

I'd like to have a rating system for my CMS. I know how I'll set up the database. I'm just running into a very small problem regarding the form:

<form method="post" action="rate.php">
<select name="rating">
<option value="1">1</option>
<option value="2">2</option>
<option value="3">3</option>
<option value="4">4</option>
<option value="5">5</option>
</select>
<input type="submit" name="submit" value="Rate" />
</form>

 

The small problem is I don't know how to pass the content id (a number) to the form. How would I do this?

[trq]

You need to elaberate. Where is this id comming from?

[Jessica]

You could store it in the session, but if you really want it in the form (and therefore, editable by users) try this:

print '<input type="hidden" name="id" value="'.$id.'">";

[avillanu]

Well my script is set up like this:

 

www.domain.com/page.php?id=25

 

would jesirose's solution work?

[Jessica]

You need to add $id = $_GET['id'] for this instance. You'll want to "clean" it by making it

$id = intval($_GET['id']); (if you're only ever expecting a number.

Otherwise users can inject SQL (google: SQL injection) or XSS attacks.

[avillanu]

Much appreciated. 

[Jessica]

No problem