Quote:For me personally, it makes no odds whether the customer ID is in the URL or in a hidden field, since a right-click and "view source" is hardly a deterrent to anyone who knows what they're doing.
i'm not talking about people doing view source, and i prefaced it by saying its not a popular opinion which narf expanded on. but narf also pointed out the extremely critical follow up which i would suggest you read carefully.
