[hekmati]

hi everybody
I have a dynaform with some fields that are disabled or are in view mode and some other fields.
before somebody wants to submits form, he can edit value of disabled or view mode fields with browser inspect element tool and then submit the form. edited data submitted the database.
is it a security bug or something is wrong?

[amosbatto]

Yes, somebody could potentially do that.
To prevent the field's value from being changed in the database, you need to mark the field's "protected value" property:

protectedValue.png (18.42 KiB) Viewed 7119 times

[hekmati]

Ok
thanks very much.