Hello,
I have successfully developed a scrapbook or the wall (on facebook) using Asp.net Membership and Ajax.. The only question i want to ask is regarding security.
The method that i have used is i keep a hiddenfield in every row which has the userid to which we are scrapping(otherwise how can we know to which user we are scrapping).and then when i scrap i take that hidden field's value so we know to which friend we made a scrap. I want to know whether this method is ok? does exposing userid in this manner cause any problem or any security flaw? can anybody just view the source of the page and make any changes in userid and cause problems with the website? Please reply me. It's little urgent. It's trivial for all those who have been developing website since years, but this is my 1st web experience.
Thanks in advance :).
...
Go to the complete details ...