Javascript如何安全地访问用户信息？

Question

When a user clicks on my green button, I need Javascript to detect this and pass the $UserID and $ActivityID to the server to be stored in the database.

But what's the best way for JS to securely get this info and send it to the server? I've been hiding variables in the HTML:

HTML:

 <div class="green-button">Add it</div>
 <input type="hidden" class="u" value = " <?php $UserID ?>  "/> 
 <input type="hidden" class="a" value = " <?php $ActivityID ?>  "/> 

jQuery:

jQuery('.green-button').click(function(event){
var $UserID = jQuery(this).siblings('input').hasClass('u').attr('value');
var $ActivityID = jQuery(this).siblings('input').hasClass('a').attr('value');
// rest of the code...

However, this doesn't seem secure. What if someone uses Firebug to change the HTML and then clicks on the button? Won't garbage be written into the dbase?

Thanks for the tips.

Answer 1

Well, you need to explain as which sort of security are you looking for. Are you looking to secure the data sent over the network? If so, then you'll have to opt for SSL certificate and send data AS post over it.

But, if you want the data to be invisible to the user, then there is no such way to do it, since if anyone is reading the packets sent from his machine, he can easily figure out what data is being sent over.