title: Anything more secure than hidden form fields in ASP.NET MVC?
body: <p>In ASP.NET MVC (default routing),I'd like to use a URL like this to return a View with a form to edit a customer:</p>
  
  <pre><code>/Customers/Edit/5
  </code></pre>
  
  <p>I need to make use of <code>CustomerId=5</code>, but I don't want to permit a customer to change it.Right now I make the id hidden using:</p>
  
  <pre><code>&lt;%= Html.Hidden("CustomerId") %&gt;
  </code></pre>
  
  <p>This accomplishes what I want,but I'm under the impression that hidden form variables are not secure and can be manipulated by the end user.</p>
  
  <p>So, what's the best way to allow a customer to edit their information but not their ID?</p>