Title: Security problem
Last modified: January 27, 2022

---

# Security problem

 *  Resolved [sinapars](https://wordpress.org/support/users/sinapars/)
 * (@sinapars)
 * [4 years, 4 months ago](https://wordpress.org/support/topic/security-problem-30/)
 * Hi Team,
    Suppose we have a slider with the following values: One Two Three I
   can easily enter the desired value into the database by changing the value !!!
   Please watch the video below:`
 * [https://filebin.net/nu8xmfir9erqj5jc](https://filebin.net/nu8xmfir9erqj5jc)

Viewing 1 replies (of 1 total)

 *  Plugin Support [Njones35](https://wordpress.org/support/users/njones35/)
 * (@njones35)
 * [4 years, 4 months ago](https://wordpress.org/support/topic/security-problem-30/#post-15302185)
 * Hi [@sinapars](https://wordpress.org/support/users/sinapars/)
 * I apologize for the slow response – I wanted to double-check this with our lead
   developer before getting back to you.
 * He has confirmed that what you see is not a security problem – this is because
   atext field is totally open and we make sure code isn’t vulnerable to SQL injection,
   and it’s escaped/filtered when it is shown.
 * Dropdowns support an “Other” option, so they are open fields.
 * A lot of our users will use filters to dynamically set options, or jQuery, custom
   scripts, etc, so it’s much safer to allow the value being sent in the form regardless
   of value than losing it entirely and having no value set at all.
 * When users want better control of their submissions, we offer fully control of
   custom validation rules using snippets. Below is an example that will force all
   dropdown fields to only allow the exact set of options that were set in the form:
 * function only_allow_set_options_in_dropdown( $errors, $field, $value ) {
    $target_field_id
   = 2492; // change this if ( $target_field_id === (int) $field->id ) { $values
   = wp_list_pluck( $field->options, ‘value’ ); if ( ! in_array( $value, $values,
   true ) ) { $errors[ ‘field’ . $field->id ] = ‘Invalid dropdown valid detected’;}}
   return $errors; } add_filter( ‘frm_validate_select_field_entry’, ‘only_allow_set_options_in_dropdown’,
   10, 3 );`
 * I hope that helps clarify things.
 * Best,

Viewing 1 replies (of 1 total)

The topic ‘Security problem’ is closed to new replies.

 * ![](https://ps.w.org/formidable/assets/icon-256x256.png?rev=2588749)
 * [Formidable Forms - Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder](https://wordpress.org/plugins/formidable/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/formidable/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/formidable/)
 * [Active Topics](https://wordpress.org/support/plugin/formidable/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/formidable/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/formidable/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Njones35](https://wordpress.org/support/users/njones35/)
 * Last activity: [4 years, 4 months ago](https://wordpress.org/support/topic/security-problem-30/#post-15302185)
 * Status: resolved