can php redirect and aff id encrypted be on same domain?

hey guys,

I don't want my aff id hijacked, my aff id can be seen in the page source

Can I get a single domain to house html encrypted code for my aff id, and a php redirect in the same host for that same domain?

I've been successful at getting a php redirect to blank the referrer by sending the traffic to www.xxxxx.com/1st.php which sends traffic to my main advert, and the referrer is blanked...so that's great!

but my aff id still shows up in the source code?

the only way I see of really cloaking my aff id so it can't be hijacked is to use an html file that encrypts it... your average cloaking just hides it from the surfer, but not the hijacker

for me I see that means two transition points(to different domains) the 1st a domain to house the html encrypted script, then sending it to the second domain "www.xxxxxx.com/1st.php" which redirects to the final LP of my advert..

can this be done within one domain?