title: Advice on Article ID and its Comment ID Shown in HTML Hidden Fields
body: <p>I have a blog that I developed using <strong>Django</strong> which allows users to publish articles and each articles can get commented on. </p>
  
  <p>I have <strong>Article TABLE</strong>. <strong>Comment TABLE</strong> that has an <code>article_id</code> column.</p>
  
  <p>When displaying <strong>articles</strong> it goes along with an <code>&lt;input type="hidden" autocomplete="off" name="user_id" value="article_id"&gt;</code>. This value is extracted with <strong>JavaScript (AJAX)</strong> when a user comment on an article to have it saved in comment table appropriately.</p>
  
  <p><em>My Fear:</em></p>
  
  <p>Since the <code>hidden value</code> can get edited using <strong>Developer Tools</strong> or something, can't someone comment on article with value 1 and have it saved on article 1000 if the value is tampered with?</p>
  
  <p>How do I deal with this?</p>