Questions, suggestions and discussion around ProcessMaker 3 documentation

Moderator: amosbatto

User avatar
By hekmati
#822331
hi everybody
I have a dynaform with some fields that are disabled or are in view mode and some other fields.
before somebody wants to submits form, he can edit value of disabled or view mode fields with browser inspect element tool and then submit the form. edited data submitted the database.
is it a security bug or something is wrong?
User avatar
By amosbatto
#822358
Yes, somebody could potentially do that.
To prevent the field's value from being changed in the database, you need to mark the field's "protected value" property:
protectedValue.png
protectedValue.png (18.42 KiB) Viewed 630 times

Yeah That will be very helpful :) Thank you

variable in external libs

Ohhh I tried this thing before but didn't work tha[…]

Limit List box

Hello Amos, The following solution is working. $[…]

It looks like jquery.masknumber.js has problems in[…]