How to secure pages from hackers?

I’ve created a site from an adobe.com tutorial. The site is a subscription site where the visitor subscribes -> get confirmation on screen about an email -> is sent an e-mail giving him the option to unsubscribe ->by clicking on the link in the e-mail, he is brought to the unsubscribe page called ‘confirm_unsubscribe.php’ where he can unsubscribe..
The last page is not secure because the url contains the ID of the subscriber. Any hacker could change the user name and wreck havoc on the database.
I’ve looked at Security Assist – Access Page Manager, to try and secure this security issue, but I haven’t a clue where to start. I have attached a zip file in case you need to see the files.

there isn't really anything here that you can use security assist for.

the normal method for doing this is called "Double Opt In"

the idea is that when the user signs up, you store the users email address in the database and a random string, this random string is generated when the user record is created, at the same time the UserID is created.

the random string will be unique to each user.

the confirm and unsubscribe links will pass both the UserID and the random string, the recordset on the unsubscribe page will lookup the users account passed on both of these variables to prevent a hacker from guessing at ID's and unsubscribing eerybody.

Okay - thanks for that information!

you're welcome.