When you execute a PHP script from another PHP script and pass data using URL parameters, those parameters are visible on the address bar. A user can see and change the parameters. It's possible to ...
in some web stuff "http://www.foo.com/page.php?username=bob"<BR>will give a variable of name 'username' and value 'bob' to a page.<BR><BR>How do I get this variable ...
Yeah, there are definitely some annoyances with database access in PHP, but I think the best approach for me is to learn how plain ol' PHP does it before going the route of an extraction library.