Web Companion Security Issue

[BuddySystems]

Am I correct that there is no way to do a -edit URL or Form without including the -RECID for the record you are editing?

If this is the case, considering that the recid is a serial number that developers have no control over, isn't it extremely easy to hack a URL and find data for other users?

[Anatoli]

Use protected chromeless HTML pages by forced frames and no one will be able to fiddle easily with URL