I have a user`s edit page, where admin should be able to modify any of the avalible fields.
the data is passed from mysql as it should.
password filed is marked as password, so it is hidden symbols.
the problem is, if admin wants to modify only lets say status or tel number.
Without any changes to password field.
what happens is, the hash value from the db which is hidden on page, is passed again to update server action, and sha256 encryption happens again.
so every time admin goes and modifies any field, password is modified as well…
please advice how to avoid it.