Merge pull request #357 from snidelytoo/hiddenfieldfix

correct SQLFORM hidden field example
web2py · Aug 4, 2017 · 8706e36 · Ford2010 · Jul 1, 2018 · Ford2010
2 parents f288f41 + cedafa3
commit 8706e36
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sources/29-web2py-english/07.markmin b/sources/29-web2py-english/07.markmin
@@ -510,8 +510,8 @@ form.vars. The reason is security. Hidden fields can be tampered with.
 So you have to explicitly move hidden fields from the request to the form:
 
 ``
-form.vars.a = request.vars.a
 form = SQLFORM(..., hidden=dict(a='b'))
+form.vars.a = request.vars.a
 ``:code
 
 #### The ``process`` method