Answer of part 2 of Question 1
Yes, The value of the hidden field index can be changed by inspecting the page of the browser