CiviCRM Community Forums (archive)

you maybe able to fine tune this through your dedupe rules - . . . /civicrm/admin/deduperules?reset=1 - perhaps ensure they are set to only match on email+last name etc

I was also going to suggest check your Profile Adv Settings but I note "This setting is ignored if the profile is embedded in an online contribution, membership signup or event registration form. In this case a contact match always results in the transaction being linked to the matching contact."

if this is a public form, and someone enters an email that already belongs to someone in your database, then i understood you were saying that the problem is that the person filling in the form if overwriting the information that is already in the system. This is happening because of the dedupe/merge rules.

So if you set your rules to 'email only' then it means that if I enter an email address, that matches one in your system, all the information I add in the other fields will overwrite what you have for that contact.

If you set your 'match' rules to be email+first+last then the info will only be overwritten if I match email+first+last (as I understand it) - so this reduces the chance of someone being malicious.

If you could set the system so that upon filling in an email it autofilled the fields, then this would be an even bigger security risk as all I would have to do would be to guess an email address, and the system would give me all their other information.

Perhaps you need to flesh out your 'use case' so we can understand what you are aiming to achieve/avoid.

Don't think you can - the match/dedupe/merge rules aren't profile specific