why not pass things through method = post instead of method = get?
Then the user would not know that there exists pageid=1 or pageid=2 -
it's all invisible because you're not passing items along the query
string and they won't be able to modify whether they're pageid=1 or 2
because it's all in the back end