diff --git a/app/Http/Controllers/Api/CustomFieldsController.php b/app/Http/Controllers/Api/CustomFieldsController.php index 345cea24d2..cd93a46383 100644 --- a/app/Http/Controllers/Api/CustomFieldsController.php +++ b/app/Http/Controllers/Api/CustomFieldsController.php @@ -59,7 +59,13 @@ class CustomFieldsController extends Controller { $this->authorize('update', CustomField::class); $field = CustomField::findOrFail($id); - $data = $request->all(); + + /** + * Updated values for the field, + * without the "field_encrypted" flag, preventing the change of encryption status + * @var array + */ + $data = $request->except(['field_encrypted']); $validator = Validator::make($data, $field->validationRules()); if ($validator->fails()) { diff --git a/app/Http/Controllers/CustomFieldsController.php b/app/Http/Controllers/CustomFieldsController.php index cd446d4a65..aa26985f11 100644 --- a/app/Http/Controllers/CustomFieldsController.php +++ b/app/Http/Controllers/CustomFieldsController.php @@ -183,7 +183,6 @@ class CustomFieldsController extends Controller $field->name = e($request->get("name")); $field->element = e($request->get("element")); $field->field_values = e($request->get("field_values")); - $field->field_encrypted = e($request->get("field_encrypted", 0)); $field->user_id = Auth::user()->id; $field->help_text = $request->get("help_text"); $field->show_in_email = $request->get("show_in_email", 0);