Questions, suggestions and discussion around ProcessMaker 3 documentation

Moderator: amosbatto

User avatar
By hekmati
#822331
hi everybody
I have a dynaform with some fields that are disabled or are in view mode and some other fields.
before somebody wants to submits form, he can edit value of disabled or view mode fields with browser inspect element tool and then submit the form. edited data submitted the database.
is it a security bug or something is wrong?
User avatar
By amosbatto
#822358
Yes, somebody could potentially do that.
To prevent the field's value from being changed in the database, you need to mark the field's "protected value" property:
protectedValue.png
protectedValue.png (18.42 KiB) Viewed 143 times

Post the code of your requests.Request work. You m[…]

Hi, seems like I am not allowed to log into proces[…]

Thanks for the reply :P

No, This answer was not working because I need the[…]