diff --git a/sources/29-web2py-english/07.markmin b/sources/29-web2py-english/07.markmin
index 15e7d824..cd7d8220 100644
--- a/sources/29-web2py-english/07.markmin
+++ b/sources/29-web2py-english/07.markmin
@@ -510,8 +510,8 @@ form.vars. The reason is security. Hidden fields can be tampered with.
 So you have to explicitly move hidden fields from the request to the form:
 
 ``
-form.vars.a = request.vars.a
 form = SQLFORM(..., hidden=dict(a='b'))
+form.vars.a = request.vars.a
 ``:code
 
 #### The ``process`` method