general URL issue

[eluser]Colin Williams[/eluser]

I see there some security problems...If you look at the URL you just can play wih the parameters directly and the maybe jump to some pages which should not be allowed to the user.

A good reason to not have "secret URLs" as your only layer of security. There are more robust solutions, like calling access checks when appropriate throughout your code.