Safely hidding information in a repeater

I need to hide some information inside a repeater.
I'm doing a quote system and I got to calculate (as an exemple) the cost of a product and it's options to make sure the quote price it not to low (or some other stuff). I don't want to display it, nor users could access it (some User with special roles will see it)

So rigth now, I use a Hiddenfield.
<asp:Repeater ID="Options" runat="server"
                                      DataSourceID="ObjectDataSourceOptions"
                                      onitemdatabound="Options_ItemDataBound">
<ItemTemplate>
     <asp:HiddenField ID="Cost" runat="server" value='<%# Eval("Master_Cost_Price") %>'/>
     ************some other stuff************
   </ItemTemplate>
 </asp:Repeater>

The aventage is that I could use a "for each" :
Dim EditableOptionsControls As Repeater = CType(FormView.FindControl("Options"), Repeater)
For Each OptionRowControls As RepeaterItem In OptionsControls.Items"

And then access those hidden field whith something like
Dim OptionCostControl As HiddenField = EditableOptionControls.FindControl("Cost")

So I don't have to query the database between each postback. It's a ajax page and the price and profit are recalculated as the client update the options.

I just saw that the hiddenfield's data is send in plain text between ajax postback (using firebug).
I read a bit, and it look pretty unsafe.

How to "hide" the cost data form the post back? Encrypt it? how?
I may use ViewState, but how it will work with a repeater? Will it be safe enough?


                                   
Start Free Trial