{"id":53,"date":"2026-06-23T04:47:51","date_gmt":"2026-06-23T04:47:51","guid":{"rendered":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/?page_id=53"},"modified":"2026-06-23T04:47:51","modified_gmt":"2026-06-23T04:47:51","slug":"case341-scf-form-other-parent","status":"publish","type":"page","link":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/?page_id=53","title":{"rendered":"Case 341 SCF Front Form &#8211; Other Parent Object"},"content":{"rendered":"<p><!-- WPAuditLab case 341 form fixture --><br \/>\n<div class=\"wpauditlab-case341-form\" data-case-id=\"341\" data-target-post=\"47\"><p><strong>WPAuditLab Case 341 SCF front-end form fixture.<\/strong> Target post ID: 47<\/p>\t\t\t\t<form id=\"wpauditlab-case341-form-47\" class=\"acf-form\" action=\"\" method=\"post\">\n\t\t\t\t\t<div id=\"acf-form-data\" class=\"acf-hidden\">\n\t\t<input type=\"hidden\" id=\"_acf_screen\" name=\"_acf_screen\" value=\"acf_form\"\/><input type=\"hidden\" id=\"_acf_post_id\" name=\"_acf_post_id\" value=\"47\"\/><input type=\"hidden\" id=\"_acf_validation\" name=\"_acf_validation\" value=\"1\"\/><input type=\"hidden\" id=\"_acf_form\" name=\"_acf_form\" value=\"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\"\/><input type=\"hidden\" id=\"_acf_render_id\" name=\"_acf_render_id\" value=\"e0dbcb97-b9e5-4a2a-b3e3-5e9c95e70fbc\"\/><input type=\"hidden\" id=\"_acf_nonce\" name=\"_acf_nonce\" value=\"56d9edc78e\"\/><input type=\"hidden\" id=\"_acf_changed\" name=\"_acf_changed\" value=\"0\"\/>\t<\/div>\n\t<input type=\"hidden\" name=\"_acf_form_meta[]\" value=\"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.624425a8d88432f691356881c4eab7a0d31f86d90ffe70c10a80fd6c68d1eff3\"\/>\t\t\t<div class=\"acf-fields acf-form-fields -top\">\n\t\t\t\t\t\t\t\t<div class=\"acf-field acf-field-text acf-field-wpauditlab-case341-public-note\" data-name=\"case341_public_note\" data-type=\"text\" data-key=\"field_wpauditlab_case341_public_note\">\n<div class=\"acf-label\">\n<label for=\"acf-field_wpauditlab_case341_public_note\">Case 341 Public Note<\/label><p class=\"description\">Benign field intended to be editable from the front-end fixture form.<\/p><\/div>\n<div class=\"acf-input\">\n<div class=\"acf-input-wrap\"><input type=\"text\" id=\"acf-field_wpauditlab_case341_public_note\" name=\"acf[field_wpauditlab_case341_public_note]\" value=\"other parent note\"\/><\/div><\/div>\n<\/div>\n<div class=\"acf-field acf-field-textarea acf-field-wpauditlab-case341-sensitive-note\" data-name=\"case341_sensitive_note\" data-type=\"textarea\" data-key=\"field_wpauditlab_case341_sensitive_note\">\n<div class=\"acf-label\">\n<label for=\"acf-field_wpauditlab_case341_sensitive_note\">Case 341 Sensitive Note<\/label><p class=\"description\">Sensitive field used to detect unauthorized rendering or mass assignment.<\/p><\/div>\n<div class=\"acf-input\">\n<textarea id=\"acf-field_wpauditlab_case341_sensitive_note\" name=\"acf[field_wpauditlab_case341_sensitive_note]\" rows=\"8\">other-parent-secret-341<\/textarea><\/div>\n<\/div>\n<div class=\"acf-field acf-field-select acf-field-wpauditlab-case341-status-color\" data-name=\"case341_status_color\" data-type=\"select\" data-key=\"field_wpauditlab_case341_status_color\">\n<div class=\"acf-label\">\n<label for=\"acf-field_wpauditlab_case341_status_color\">Case 341 Status Color<\/label><\/div>\n<div class=\"acf-input\">\n<select id=\"acf-field_wpauditlab_case341_status_color\" class=\"\" name=\"acf[field_wpauditlab_case341_status_color]\" data-ui=\"0\" data-ajax=\"0\" data-multiple=\"0\" data-placeholder=\"Select\" data-allow_null=\"0\"><option value=\"blue\">Blue<\/option><option value=\"green\">Green<\/option><option value=\"red\" selected=\"selected\" data-i=\"0\">Red<\/option><option value=\"black\">Black<\/option><option value=\"yellow\">Yellow<\/option><\/select><\/div>\n<\/div>\n<div class=\"acf-field acf-field-number acf-field-wpauditlab-case341-owner-user-id\" data-name=\"case341_owner_user_id\" data-type=\"number\" data-key=\"field_wpauditlab_case341_owner_user_id\">\n<div class=\"acf-label\">\n<label for=\"acf-field_wpauditlab_case341_owner_user_id\">Case 341 Owner User ID<\/label><p class=\"description\">Ownership metadata; should not be blindly mass-assignable by low-privilege actors.<\/p><\/div>\n<div class=\"acf-input\">\n<div class=\"acf-input-wrap\"><input type=\"number\" id=\"acf-field_wpauditlab_case341_owner_user_id\" name=\"acf[field_wpauditlab_case341_owner_user_id]\" value=\"21\" step=\"any\"\/><\/div><\/div>\n<\/div>\n<div class=\"acf-field acf-field-text acf-field-wpauditlab-case341-allowed-role\" data-name=\"case341_allowed_role\" data-type=\"text\" data-key=\"field_wpauditlab_case341_allowed_role\">\n<div class=\"acf-label\">\n<label for=\"acf-field_wpauditlab_case341_allowed_role\">Case 341 Allowed Role<\/label><p class=\"description\">Authorization metadata; included to test form metadata\/field list tampering.<\/p><\/div>\n<div class=\"acf-input\">\n<div class=\"acf-input-wrap\"><input type=\"text\" id=\"acf-field_wpauditlab_case341_allowed_role\" name=\"acf[field_wpauditlab_case341_allowed_role]\" value=\"author\"\/><\/div><\/div>\n<\/div>\n<div class=\"acf-field acf-field-file acf-field-wpauditlab-case341-private-file\" data-name=\"case341_private_file\" data-type=\"file\" data-key=\"field_wpauditlab_case341_private_file\">\n<div class=\"acf-label\">\n<label for=\"acf-field_wpauditlab_case341_private_file\">Case 341 Private File<\/label><p class=\"description\">Private attachment reference for data exposure\/file access checks.<\/p><\/div>\n<div class=\"acf-input\">\n\t\t\t<div class=\"acf-file-uploader\" data-library=\"all\" data-mime_types=\"\" data-uploader=\"basic\">\n\t\t\t\t<input type=\"hidden\" name=\"acf[field_wpauditlab_case341_private_file]\" value=\"\" data-name=\"id\"\/>\t\t\t\t<div class=\"show-if-value file-wrap\" tabindex=\"0\" role=\"button\" aria-label=\"Selected file. Press tab to access file options.\">\n\t\t\t\t\t<div class=\"file-icon\">\n\t\t\t\t\t\t<img decoding=\"async\" data-name=\"icon\" src=\"\" alt=\"\" \/>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<div class=\"file-info\">\n\t\t\t\t\t\t<p>\n\t\t\t\t\t\t\t<strong data-name=\"title\"><\/strong>\n\t\t\t\t\t\t<\/p>\n\t\t\t\t\t\t<p>\n\t\t\t\t\t\t\t<strong>File name:<\/strong>\n\t\t\t\t\t\t\t<a data-name=\"filename\" href=\"\" target=\"_blank\"><\/a>\n\t\t\t\t\t\t<\/p>\n\t\t\t\t\t\t<p>\n\t\t\t\t\t\t\t<strong>File size:<\/strong>\n\t\t\t\t\t\t\t<span data-name=\"filesize\"><\/span>\n\t\t\t\t\t\t<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<div class=\"acf-actions -hover\">\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"acf-icon -cancel dark\" data-name=\"remove\" href=\"#\" title=\"Remove\" aria-label=\"Remove file\"><\/a>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"hide-if-value\">\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t<label class=\"acf-basic-uploader\">\n\t\t\t\t\t\t\t<input type=\"file\" name=\"acf[field_wpauditlab_case341_private_file]\" id=\"acf-field_wpauditlab_case341_private_file\" key=\"field_wpauditlab_case341_private_file\" \/><input type=\"hidden\" name=\"acf[field_wpauditlab_case341_private_file_file_nonce]\" value=\"557c48a095\" \/>\t\t\t\t\t\t<\/label>\n\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n<\/div>\n<div class=\"acf-field acf-field-text acf-field--validate-email\" style=\"display:none !important;\" data-name=\"_validate_email\" data-type=\"text\" data-key=\"_validate_email\">\n<div class=\"acf-label\">\n<label for=\"acf-_validate_email\">Validate Email<\/label><\/div>\n<div class=\"acf-input\">\n<div class=\"acf-input-wrap\"><input type=\"text\" id=\"acf-_validate_email\" name=\"acf[_validate_email]\"\/><\/div><\/div>\n<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"acf-form-submit\">\n\t\t\t\t\t<input type=\"submit\" class=\"acf-button button button-primary\" value=\"Update Case 341 Fixture\" \/>\t\t\t\t\t<span class=\"acf-spinner\"><\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/form>\n\t\t\t<\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":21,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-53","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=\/wp\/v2\/pages\/53","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=53"}],"version-history":[{"count":0,"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=\/wp\/v2\/pages\/53\/revisions"}],"wp:attachment":[{"href":"https:\/\/audit-gekzxklmsv5c.wpauditlab.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=53"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}