Best Practice - CRUD operations MVC4 -

i want know if there better way implement crud mentioned below.

    [httpget]     public actionresult editstudent(int studentid)     {         student obj = studentbal.getstudent(id);         return view(obj);     }      [httppost]     [validateantiforgerytoken]     public actionresult editstudent([bind(include="lastname,firstmidname,enrollmentdate")]student model)     {         return view();     } 

i don't want pass studentid(primary key) client end can modified developer tools(firebug etc.). have excluded studentid on post request too. let me know how can perform update/change without passing primarykey.