> Assuming I trust any manually specified id - sometimes I'm paranoid
> enough that I don't even trust myself. The max() check was the simplest
> way I came up with to guarantee the validity of the id.
>
> --
> Daniel

I still have to question your motive and your design though. You allow
manually specified IDs only to change them later if it doesn't suit your
backend. Why? Why not just manage your own IDs and not let anyone specify
them at all?
Alan