Passing Hidden Variables

I set up a site with multiple users and each userID accesses an access database with their info. Currently I'm passing their userID by doing <a href="link.asp?user=<% userID %>">blah</a> Is there a better way to do this because as of right now, any user can just change that link location to view any other account info.

Session variables can be used to store who's who so you don't have to pass the id in an easily changeable location. If your users are logged in using network IDs then that ID is also available from Request.ServerVariables("LOGON_USER").

thanks, I used session("userID") and it worked perfectly