How to avoid pre-populated data to be tampered?