correct SQLFORM hidden field example

per Joe Barnhart Monday, May 8, 2017 at 2:07:01 PM UTC-7, https://groups.google.com/d/topic/web2py/QR-YROCPrQI/discussion
web2py · May 11, 2017 · cedafa3 · cedafa3
1 parent f288f41
commit cedafa3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sources/29-web2py-english/07.markmin b/sources/29-web2py-english/07.markmin
@@ -510,8 +510,8 @@ form.vars. The reason is security. Hidden fields can be tampered with.
 So you have to explicitly move hidden fields from the request to the form:
 
 ``
-form.vars.a = request.vars.a
 form = SQLFORM(..., hidden=dict(a='b'))
+form.vars.a = request.vars.a
 ``:code
 
 #### The ``process`` method