I'm working on a mapping application and will be allowing a user to make a query and have the resulting locations display on a map.
I want the users to be able to interact with the map, but I need to know exactly which item they're interacting with, so it would be easiest if when the original query is made, the id's are put in a hidden field somewhere so I can just perform an insert statement based just on the key, rather than having to to another query to find out the key by saying "where location name is x and the coordinates are y, and the description is z" etc.
Is this a bad idea, i.e. could anyone do any harm if they discovered that I was storing the primary key in a hidden field?
View Complete Post