Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Hidden form fields are validated #4126

Closed
aschempp opened this Issue Mar 28, 2012 · 6 comments

Comments

Projects
None yet
2 participants
Member

aschempp commented Mar 28, 2012

If a form field is of type "hidden", the field settings for "rgxp" (and probably others) is still applied. This can be overridden by disabling the __set() key.

Owner

leofeyer commented Mar 29, 2012

No, please don't. Of course we need input validation even on hidden fields!

@leofeyer leofeyer closed this Mar 29, 2012

Member

aschempp commented Mar 29, 2012

How come? If that is true, then the respective fields must be shown in the form generator.

Owner

leofeyer commented Mar 29, 2012

Hm, good point. Shall we leave hidden fields unvalidated then? Does not sound like a good idea to me :)

Member

aschempp commented Mar 29, 2012

Why not? The user is not supposed to fill them, so the data should be correct? I know it can be manipulated, but I don't know what people will use hidden fields for...

Owner

leofeyer commented Apr 30, 2012

I guess they use hidden fields when they send the form data via e-mail or generate multi-page forms. I prefer to show the validation options in the form generator (see 85819f7) instead of not validating the fields at all.

Member

aschempp commented Apr 30, 2012

Agreed.

Please notice that this ticket should not have been closed prior to now ;-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment