Storing previous URL as session data

[eluser]Jondolar[/eluser]
The point I was trying to make is that you need to validate that the person logged in has the authority to delete record number 25. If the user does have authority, then let them delete the record. If the user changes the url to record 100 and the user DOES have authority, then let them delete that one too. If the user DOES NOT have authority to delete record 100 then don't do the delete.

The key is to validate that the user is logged in AND has authority to delete the requested record. If the user does not own the record, don't let them delete it.