Registration flow/design question

Placebo

Hey Guys,
I have a 3 step registration process.
reg1.php
reg2.php
reg3.php

firstly is there anyway i can mask this
so people cant see the above however they wont be able to skip steps [see below]

after reg1.php you get passed on to reg2.php
however there is an ID assciated with this reg2.php=youremail@blahblah.com

so if email doesnt exist, i can redirect to any other page but is this the best way ? should i be using sessions instead? security ?

Whats the standard way ?

Thanks

Webmonkey

Why do you need seperate files. You could have the steps passed as GET variables.

Also you could mask what file is being used using Mod Rewrite on apache if you using it so /registration/step1 goes to registration.php?step=1, /registration/step2 goes to ?step=2 etc.

Placebo

thanks web monkey, i have separate files because registration effects users differently, some enter code in step 2, some have to be emailed the code etc

also it makes it easier not to be hiding div's etc

using get to pass values on to the next page?

fasty

If you're dead set on using separate pages, you should POST values, not GET them.