Currently, I am developing a website using JavaScript and C#. I am connecting the two languages by utilizing generic handlers.
My goal is to allow users to delete or edit their own content while displaying the same data to everyone. For instance, when a user is logged into the website's homepage, they should be able to delete their own questions.
How can I achieve this functionality without compromising security? One idea I had was to keep a cookie and validate it with each request.
For example, how does Facebook enable users to only delete their own comments and not others'? Do they track individual sessions for each user?
If you have any insights or suggestions, please share!