The best way to encrypt data in PHP is to use a modern reversible-encryption functions like mcrypt_encrypt and mcrypt_decrypt. However, this is simply obscuring the url, it does not fully protect you from someone simply making a robot to check all the delete urls available (given, there may be quite a few)., To avoid this, configure PHP to only accept session identifiers via cookies. This can be enabled by setting the session.use_only_cookies parameter in the php.ini file: session.use_only_cookies = 1 Secure session cookies with the HttpOnly and Secure flags. Session cookies must be protected against attacks such as cross-site scripting (XSS)., W3Schools offers free online tutorials, references and exercises in all the major languages of the web. Covering popular subjects like HTML, CSS, JavaScript, Python, SQL, Java, and many, many more., , , .