I am working on a website in which there would be functionalities to update and delete data on the basis of id. Now the thing I am worried about is like my url would be 

> 
> www.example.com/public/controller/action/1
> 
> 
> 

if the action would be `delete`, any person can `change id from 1 to 2` in url and the data with id 2 would get deleted. What would be the best way to keep the flow secure. I am using Zf2 and Doctrine2... Any suggestions please !!! And moreover I am keeping ids hidden in fields, anybody can use firebug to change the value in fields, is there any way to protect data from that too?

Would any encryption-decryption way would make it secure, like if anybody even edits the encrypted value, after decrypting it would not result in a required id? Which one would be good?