in Aruba self-registration form, there one default field "expire_after" which has the initial value of 24 hours. This field is hidden so guest users dont see the field in web page, but they can still see the field and its value when they view the source of this page.

some customers are concerned about the possibility of guest users modifying this filed and sending post command to ClearPass with different value not approved by administrator.

------------------------------
Ahmad Enaya
------------------------------