security on retrieve_id.php