sql statements to call unique user records - What is wrong with it now?

In the report.php, my record set I have following as hyperlinked word
'EDIT' with following assigned to it:
SELECT *
FROM mdbTable
WHERE username = 'colname'
ORDER BY AlbumID ASC

name value RT value
colname 1 $HTTP_SESSION_VARS['username']

When I select the record to be edited I get the very last record displayed
in the following mdbedit.php page. ..why ?

----------------------------------------------------------------------------
------

In the file mdbedit.php, my record set I have following:
SELECT *
FROM mdbTable
WHERE username = 'colname'
ORDER BY AlbumID DESC

name value RT value
colname 1 $HTTP_SESSION_VARS['username']

OK now i have get rid of the URL parameters. This page (mdbedit.php) now
displaying the user's records in DESC order and only displaying the very
last record (Ok due to DESC) . All the information as far as displaying the
current user's name and the 'last' record IS correctly displayed.

My question is how can I display only the selected record to be edited by
the user. I can do this with URL parameters but , I don't want to display
users name nor the record ID in the URL in case some users might change the
record ID and edit someone elses record.

Can anyone simply explain please ?

M/E.