title: Can anybody hack my ajax request in jquery?
body: <p>Many a times i do some weird things while using <code>jquery ajax</code>. I mean, i keep a hidden variable which contains <code>id</code> and then when somebody clicks <code>button</code>, i run a javascript function which passes ajax request along with the <code>id</code> that is contained in <code>hidden field</code>. Is this normal? What if somebody uses <code>firebug</code> or any such tool and changes the <code>javascript</code> function and passes some other <code>ids</code>? It will update and delete other records which may not belong to that user? How do you all handle this?</p>