Record Security and URL info

Quote :

> I have a classlist table that lists the student data and the teacher_id of
> the
> teacher assigned to them.
>
> I have several other tables where data is created/updated, and these are
> keyed
> by the student_id.
>
.......
> I have a link that takes the user to a different page, passing the
> student_id
> variable via URL along with it.
.......
> Now, I need to stop people from playing with the URL and manually typing
> in
> another student ID number.
........
> Is there a quick and dirty way to stopping teachers (who all have the same
> user
> access level btw) from looking at other students records?
........

  
  
global  $Redirect;  
  
if (CCDLookup("teacher_id", "classlist", "student_id =" .   
ccsInteger(CCGetFromGet("stud_id",0)), $DBConnection1) !=  CCGetUserID() ){  
    //  
   // Do something here like redirecting to a 404 page, or back to index.php  
  $Redirect = "index.php"; // or let the redirect unchanged which should   
take the back to the grid they came from (not sure)  
  //  
}  

  
global  $Redirect;    
global $DBConnection1;  
  
$student_id = CCGetParam("stud_id", "");  
if ($student_id != 0 && CCGetUserID() != CCDLookUp("teacher_id", "classlist", "student_id=".  
$DBConnection1->ToSQL($student_id, ccsInteger),  $DBConnection1))  
{  
   $Redirect = "nameofreturnpage.php"; //  
}