Public facing Forms are able to change customer record

[hotChili]

I was testing a public facing Form today and setting some Meta fields on the customer record with Flow. That works fine.

BUT...

I noticed that IF I use the same email address that is already on record for a Customer, processing of the form will update the Customer First Name and Customer Last Name. This all happens before Flow kicks off so no way to intercept that record update.

Anyone else seeing the same behavior?

[sahilsharma9515 · Accepted solution]

Hi @hotChili It's the default behavior of shopify, because shopify use email as a unique identifier and if you will use the same email every time it will check on the system that if the same email is available in your store so it will update the name which is already stored in your store.

Hopefully it will help you. If yes then Please don't forget hit Like and Mark it as solution!

Best Regards

Sahil

[hotChili]

Yeah, thanks for that and had that figured out that email was the primary key. But this is not really an ideal behavior. This would allow anyone to change account name if they had the email. Really needs to be workflow in front of it. Simple fix would be to tell forms to go to Flow for processing, rather than the default Shopify processing. I guess I could take the names out of the form.