# Required fields being bypassed and conditional logic being ignored

**URL:** <https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502>\
**Category:** Get Help\
**Tags:** required-fields, firewall, conditional-logic, edge\
**Created:** [September 27, 2022, 3:42pm UTC](https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502 "2022-09-27T15:42:30Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![solutionsguy1](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@solutionsguy1](https://community.gravityforms.com/u/solutionsguy1)\
**Post date:** [September 27, 2022, 3:42pm UTC](https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502/1 "2022-09-27T15:42:30Z")

</div>

I’m using GF 2.6.x with two forms. Step 1 is a simple request info box and step 2 is a multi-page form. Step 1 passes the users City and State to Step 2 as a query string. In Step 2 we ask the user to validate the city and state, and then perform some conditional logic based on the users input.

We’re seeing two problems. One, required fields in Step 2 are being ignored and not provided. Two, users are able to somehow over-ride the conditional logic in step 2. For example, if a user enters a city and state where we aren’t located, we normally end the process and simply tell the user we don’t serve that area. However, users are somehow able to “hack” the city and state in Step 2, and the multi page form continues as though the user did reside in an area we serve.

The good news is that these hacked entries are not being saved in MailChimp.

The problem appears to come from users using Chrome, but I cannot reproduce.

---

<div class="post-metadata">

**Author:** ![user6214a10204c20908](https://avatars.discourse-cdn.com/v4/letter/u/b3f665/32.png) [@user6214a10204c20908](https://community.gravityforms.com/u/user6214a10204c20908)\
**Post date:** [September 30, 2022, 8:22am UTC](https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502/2 "2022-09-30T08:22:30Z")

</div>

We are experiencing a similar issue with users bypassing all required fields. However, it is limited to Microsoft Edge in our case. We have theorized that it is our clients firewall as they are a bank.

---

<div class="post-metadata">

**Author:** ![solutionsguy1](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@solutionsguy1](https://community.gravityforms.com/u/solutionsguy1)\
**Post date:** [October 28, 2022, 4:40pm UTC](https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502/3 "2022-10-28T16:40:55Z")

</div>

I’m curious. Is the GF validation client side only or is it also performed server side?

---

<div class="post-metadata">

**Author:** ![chrishajer](https://sea2.discourse-cdn.com/flex020/user_avatar/community.gravityforms.com/chrishajer/32/88_2.png) [@chrishajer](https://community.gravityforms.com/u/chrishajer)\
**Post date:** [October 28, 2022, 5:54pm UTC](https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502/4 "2022-10-28T17:54:01Z")

</div>

Input validation is performed server-side by Gravity Forms. If you have any questions about your form specifically, please start a new topic or open a support ticket, and we’ll help you out. Thank you.

---

<div class="post-metadata">

**Author:** ![chrishajer](https://sea2.discourse-cdn.com/flex020/user_avatar/community.gravityforms.com/chrishajer/32/88_2.png) [@chrishajer](https://community.gravityforms.com/u/chrishajer)\
**Post date:** [October 28, 2022, 5:54pm UTC](https://community.gravityforms.com/t/required-fields-being-bypassed-and-conditional-logic-being-ignored/13502/5 "2022-10-28T17:54:10Z")

</div>


