ID in URL
I have nearly finished off an application that i have been working on for a client.
Issue i have while i am testing is the clients_Details page is secure for logged in users.
However eash userid has their own set of clients.
If i am logged in as UserID 1 and clientID 1 assigned to UserID 2 all i need to do is in the url type clients_Detail.php?ClientID=1 and i can see this client details.
is there a way i can get around only the users being able to see their own clients details?