Newsletter sign-up
View all newsletters

Enterprise Java Newsletter
Stay up to date on the latest tutorials and Java community news posted on JavaWorld

JavaWorld Daily Brew

Hidden Form fields-Alternatives



Hi, It's been established that Hidden form fields are insecure to use in web applications.
Now my question is what all are the alternatives do we have before if we want to avoid (eliminate) the usage of hidden form fields.

For example one have typical we application where user searches the employee and gets the tabular result with one Action column where number of option will be provided like EDIT/DELETE/VIEW.

Now in order to open edit one have to pull that record from the database and open the editable form for the user.

Here the problem starts, now we normally keep some unique value of that employee record there in the hidden field so that at server side the exact database record can be updated.

Surely, this hidden variable can easily tempered and in turn will lead to wrong database update.

Please suggest.