FORM / Redirection help required!

[eluser]boltsabre[/eluser]

sir i would like to tell you that you should not use $_GET/uri values in inserting a data, instead use $_POST for security purposes. $_GET is just intended for getting data not posting

In terms of security using $_GET (aka $this->uri->segment(3)) or $_POST (aka a hidden input) makes no difference as BOTH are open to manipulation by users.

Whatever method you use you should still validate/cleanse ALL variables that you do not explicitly set yourself. This includes stuff like the values the $_SERVER and $_COOKIES superglobal variables, etc.