About; Products @jpo In onclick="javascript: myFunc(myID)", myID should be wrapped by single quotes. It can be easily bypassed using the DOM, for example by creating a hidden