ASP.NET MVC 2 EditModel include Id? Securing Id is not tampered with
问题 I am looking for some best practices when is comes to creating EditMoels and updating data in an ASP.NET MVC app. Lets say I have a Url like so /Post/Edit?Id=25 I am ensuring the user has permissions to edit the specific post by Id on the Get request and the same for my Post in the controller. I am using the ValidateAntiForgeryToken. Questions: Should I include the Id property in my EditModel? If so, Should I encrypt it? The problem is I can use FireBug to edit the Id hiddedinput and edit a