I'm building a phpapi and in this api will be giving my clients API key generated for each client.
So basically my client will be sending client id, his personal data(to be stored in DB) & an API key to my api.php page and this API key will be placed in a hidden field on clients form.
Now my doubt here is that this key can be seen by anyone if they view page source...
So how can I prevent key from being not seen so that no other clients can use it for them.
Is there any other way to place API key on form so it cannot be seen and use securely?