It's possible to hide the URL parameters from users by creating a PHP session. You must then store the parameters in session variables, use a PHP redirect to call the second PHP script and ...