Questions, suggestions and discussion around ProcessMaker 3 documentation

Moderator: amosbatto

User avatar
By hekmati
#822331
hi everybody
I have a dynaform with some fields that are disabled or are in view mode and some other fields.
before somebody wants to submits form, he can edit value of disabled or view mode fields with browser inspect element tool and then submit the form. edited data submitted the database.
is it a security bug or something is wrong?
User avatar
By amosbatto
#822358
Yes, somebody could potentially do that.
To prevent the field's value from being changed in the database, you need to mark the field's "protected value" property:
protectedValue.png
protectedValue.png (18.42 KiB) Viewed 54 times

i sure it is very interesting and entertaint for y[…]

ok, Where should I set the TRIGGER in this simple[…]

No clue. I've never tried using that. You can cha[…]

When you are inside the ProcessMaker interface and[…]