she has found hidden form fields in the source code of the vendor’s website