$form->field( name => 'field_name', readonly => 1);
For checkboxes, you can use disabled
$form->field( name => 'choices', disabled => 'disabled');In response to the pedants, this is not a security issue. It is a usability question. The form is showing a different view of the same data to perform different operations on it.
For example "make a duplicate record", or "delete record". It doesn't make sense for the user to modify those fields if the action ignores those modifications.
The permissions handling is still managed by the server. If a user added his own query parameter in the request "&destroy_everything=1", doesn't mean the server will obey it.
In reply to Re^2: cgi::formbuilder submit button non-editable form
by Anonymous Monk
in thread cgi::formbuilder submit button non-editable form
by chrism01
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |