I have a couple of forms...

Unluckily this is open to 'abuse'. 
This form is two step, they enter a 'user number' then they get a 
dynamically generated form (accordingly) and can enter their details. Only 
peeps are posting their complete details directly and missing the first 
validation step (where 'user number' is entered and looked-up).

I.E. they use the URL: 
http://www.mydomain.com/MsgSend?
form_type=normal&usr_num=09493655481&input1=now&input2=yesterday&input3=tom
orrow

** This cannot be done using HTACCESS or cgi (this is on a Netscape 
Enterprise server...). **

Can I use JavaScript to ensure they have completed the first step 
(validation form)? If so can anyone point me towards a good example or the 
right direction?

Many thanks.