title: How to pass variables to a CFC on Form submission without using hidden fields?
body: <p><em>Using: ColdFusion 10, JQuery 1.9, IIS</em></p>
  
  <p>I made a CFC (allows remote access) which handles the insertion of comments into a database, whether they are new comments or replies to an existing one.</p>
  
  <p>I have a Form which submits to this CFC when you want to make a comment.</p>
  
  <p>At the moment I am passing (as hidden fields) form variables to the CFC to tell it various things about the comment that's to be inserted: e.g. which <code>User</code> the comment is for (the RecipientID) and which <code>CommentID</code> its in reference to (if its a reply). These values change a lot because sometimes a user is replying to another user's comment.</p>
  
  <p>I don't want to send the hidden variables in my form because it can easily be modified by a malicious person. How can I send the main Form information using form variables (e.g. the comment body) but pass the sensitive variables using just ColdFusion so its not manipulable by a hacker? </p>
  
  <p>One thing I could do is submit back to the page itself and then use <code>&lt;cfinvoke&gt;</code> to call the CFC and pass in the arguments. I would set the arguments in the invocation rather than in the Form. Would this be the correct way to do it?</p>