通过url传递数据库变量有多安全

Question

Please I am designing a website and passed two IDs to through URL and got it using GET .But I noticed that anyone could change the value of ID in the URL and it alters the page content. Is there anyway to prevent this ... A code like

www. site.com/main.php?user1_id=4&user2_id=7

If changed by anybody to

www.site.com/main.php?user1_id=6&user2_id=10

It shows another detail not meant to be seen.

Answer 1

Implement control at server side and check if the user requesting the resource has access to it or not. Anyone can change anything at client side easily. This should be controlled from server.