CiviCRM Community Forums (archive)

I am using CiviCRM webform module and I want to pre-populate some of the fields if i send the link through CiviMail.
It is currently possible using the "Additional OptionsCreate Fieldsets, Confirm Subscriptions(tab)" on the web form .
Here it says  "To have this form auto-filled for anonymous users, enable the contact 1 "existing contact" field and send the following link from CiviMail: http://www.example.com/example/test?cid1={contact.contact_id}&{contact.checksum}"

This link will generate a link like this below, when sent through CiviMail:
http://example.com/example/test?cid1=4&cs=c6511e4d1e9b2cefff031f0455be88e0_13684567771_720

Problem:
If the receiver of the mail clicks on the link, it pre-populates his/her contact details but if he/she changes the value of cid1 shown below:
"cid1=5&cs=c6511e4d1e9b2cefff031f0455be88e0_13684567771_720"
It populates a different contacts details if present in the database.

Please, note that anonymous users have no permissions to access CiviCRM on the site.
 
Is this a bug or am i doing something wrong? Please for ideas!!

Hi Coleman,
I can confirm that
1) I am NOT logged in while testing
2)  Enforce Permissions  for existing contact is enabled (checked)

And I have tested it on different networks, at home and at work and I am still able to call up the contacts details of other contacts by simply changing the cid1= value

thanks,

Removing cs=xxxxxxxxxxx does not change anything so long as ?cid=some value, i am able to call up contact details.
Anonymous users have no CiviCRM permissions except to view published content.
I am using Civicrm 4.3.1 & D7

Am i the only one having this problem??

We solved this via private msg, thanks for following up here and marking the issue resolved.