thanks guys,

as i said the hidden field is very vulnerable , a malicious user could simply edit it's value and then make unauthorized changes

TempData cause other issues, because it's not tied to current page, so if the user wants to make several changes in different tabs at the same time then boom!, everything goes wrong