Currently, the email and username in the contact form of daiquiri are editable fields. This is not only unnecessary since only the logged-in users can use the form and therefore, these info is already known, but it can also be used for malicious purposes.
Improvement
Remove email and username from the form and pull these info from the django model to use in the contact messages.
Currently, the email and username in the contact form of daiquiri are editable fields. This is not only unnecessary since only the logged-in users can use the form and therefore, these info is already known, but it can also be used for malicious purposes.
Improvement Remove email and username from the form and pull these info from the django model to use in the contact messages.