Sometimes users are able to enter value of hidden fields