Lets say that you recieve an id number through a querystring.
When loading the page you do a querystring control and fetch the correct object when established that the id is correct.
At that point a save button is enabled.
When hitting the save button and thereby doing a postback you do a request.querystring again and update the row correspondig to that ip.
Is this totally insecure securitywise? I mean if you just switch id number in the querystring and presses enter the page will reload and validate again = no problem. But this can perhaps be abused some other way i guess? Sessions are one way i guess but a persistant solution would be better if possible.
Is there a preferred method for handling these situations? POSTs is not optional as i need every page to be directly linkable in an easy way.
...
Go to the complete details ...