Come to think of it, do I need to lock things down so someone can't add an 
id to a URL and be able to edit it?

Reply via email to