# Question about form and contact-update behaviour

**URL:** <https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023>\
**Category:** Product Support\
**Created:** [May 7, 2022, 5:24am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023 "2022-05-07T05:24:15Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![iparker](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/iparker/32/1936_2.png) [@iparker](https://forum.mautic.org/u/iparker)\
**Post date:** [May 7, 2022, 5:24am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/1 "2022-05-07T05:24:15Z")

</div>

Hello,

I try to implement my first forms with mautic. I want to create a simple form for newsletter-sign-up with data like company name, firstname, lastname and email. This form should be available for all users on the website.

When I insert a email-adress of an existing user it seems like mautic updates the existing user with the form data.

This means that ANYONE is able to change data of my mautic contacts, just by guessing an existing email address.

I don’t like this behaviour and think this is kind of critical for misuse.

How do you think about this? Is there any way to avoid this?

I also tried the kiosk mode in the form settings but the update-behaviour seems the same.

Thanks for some help!

Best regards,

Timo

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [May 7, 2022, 6:28am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/2 "2022-05-07T06:28:38Z")

</div>

Yes it’s possible. You would able to see the ip where this is coming from and ban if you want. Of course this would result in a whack a mole game, but you have this option.  
Not sure what the benefit is besides messing with you. I’ve never had this issue.  
I had other issues but not this.

---

<div class="post-metadata">

**Author:** ![iparker](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/iparker/32/1936_2.png) [@iparker](https://forum.mautic.org/u/iparker)\
**Post date:** [May 7, 2022, 8:01am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/3 "2022-05-07T08:01:39Z")

</div>

Hi Joey,

thanks for your quick reply. So there is no way to disable this form-update-contact-behaviour in any way?

The only possibility I see is to submit the data via rest api and check if the email already exists (and then do no update on the names). But this is much more effort because these calls have to be programmed.

Best regards,

Timo

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [May 7, 2022, 8:28am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/4 "2022-05-07T08:28:47Z")

</div>

Hi, sure. So what you wanna do is not to save the entry if the email already exists?

---

<div class="post-metadata">

**Author:** ![iparker](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/iparker/32/1936_2.png) [@iparker](https://forum.mautic.org/u/iparker)\
**Post date:** [May 7, 2022, 8:56am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/5 "2022-05-07T08:56:37Z")

</div>

Right - I don’t want to save/update the contact in this case. Is there a build-in way to do this?

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [May 7, 2022, 3:19pm UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/6 "2022-05-07T15:19:01Z")

</div>

You can just not connect it with any field. Would that work?

---

<div class="post-metadata">

**Author:** ![iparker](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/iparker/32/1936_2.png) [@iparker](https://forum.mautic.org/u/iparker)\
**Post date:** [May 7, 2022, 4:06pm UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/7 "2022-05-07T16:06:23Z")

</div>

I think not - or In don’t understand how mean it.

I want to save the firstname in the firstname. But in best case just for new contacts.

Can you explain me how you mean “not connect”?

---

<div class="post-metadata">

**Author:** ![hewi](https://avatars.discourse-cdn.com/v4/letter/h/4bbf92/32.png) [@hewi](https://forum.mautic.org/u/hewi)\
**Post date:** [November 16, 2023, 4:04pm UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/8 "2023-11-16T16:04:08Z")

</div>

Hi iparker,

have you solved it?

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [November 17, 2023, 11:05am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/9 "2023-11-17T11:05:03Z")

</div>

When you create a form, normally you would connect the fileds with custom fields in Mautic.

 ![image](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/4/4e87227c38adc7b3e4ea3b14d50aae86e71181f2.png)

But you don’t have to. You can leave this open, then it won’t be saved.

 ![image](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/c/c3da612784acdb43ddb3386a1885d35087aa70c5.png)

At the same time, it will be visible in Form results, and you can download and reimport them as you like.

---

<div class="post-metadata">

**Author:** ![hewi](https://avatars.discourse-cdn.com/v4/letter/h/4bbf92/32.png) [@hewi](https://forum.mautic.org/u/hewi)\
**Post date:** [November 21, 2023, 9:30am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/10 "2023-11-21T09:30:03Z")

</div>

Thanks, but this does not fix my problem.

When the form filled the first time, the field should be mapped to the contact fields. The fields should not be updated, if the form will be used again, with the same email.

One approach, I have seen on another page, is to register only by email and to get an email with a link including a hash to another form on which you can set your preferences and your personal information.

Do you know how we can implement this, or is this some custom implementation?

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [November 21, 2023, 9:57am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/11 "2023-11-21T09:57:21Z")

</div>

You can always hide the fields which are already filled out, so it won’t be updated.  
Is that any help?

 ![image](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/0/04a65a3362ad067ab305c2e94a0f36dbd9e5f3b7.png)

---

<div class="post-metadata">

**Author:** ![hewi](https://avatars.discourse-cdn.com/v4/letter/h/4bbf92/32.png) [@hewi](https://forum.mautic.org/u/hewi)\
**Post date:** [November 21, 2023, 10:18am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/12 "2023-11-21T10:18:10Z")

</div>

But that would not prevent another person to fill the form because Auto fill data is bound to the real persons client device.  
Furthermore, we are a university and different users tend to use the same device.

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [November 21, 2023, 10:25am UTC](https://forum.mautic.org/t/question-about-form-and-contact-update-behaviour/24023/13 "2023-11-21T10:25:07Z")

</div>

Okay, I start to understand what you need 😃  
Yes, you can use the hash solution. In this case you need to make sure you have a second key besides email, so you can use it for pre-populating data.

How is the registration of students done? (aka who would assign the hash? automatically?)
