> -----Mensagem original----- > De: David Dorward > So the value attribute contains an encrypted representation of the country > name ... which is transmitted in clear text right next to it? > > If you want encryption, why not just use SSL? The value attribute contains an encrypted value of a row id in the database table for countries. How would I know which country the user has selected if I don't know its row id to insert on a members table (either plain, masked or encrypted)? > name ... which is transmitted in clear text right next to it? What is posted is the value attribute of the option elements not the country text (do a print_r($_POST)). Suppose you are on a Private Area on a website after login and you might have links such as: <a href="page.php?changeprefs">Preferences</a> <a href="page.php?op=3">Change Password</a> <a href="site/changeemail">Change E-mail</a> In my approach these links would be like: <a href="page.php?ad6467ae6757">Preferences</a> <a href="page.php?op=97874bd86a4a5">Change Password</a> <a href="site/97874bd86a4a5">Change E-mail</a> - for this you need ht access on apache -I think- -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php