Sample:

http://sampleweb.com/mod/form/form.php?id=185&form_data_league_match_score_host=Joe

No. You can set them in the field definition however.

Could we just add the following code within the "mods/form/model/model.php" file in the "form_get_input_display_item()" function at around lines #717? Right after we "prepopulate" for the admin and standard user.

if ( get_input($internalname,'') != '' ) $value=get_input($internalname,'');

Go ahead and try that and see if it works for you.

I need to think about this feature more because allowing query string input sometimes introduces security issues.

If it works for you, I could add it eventually as an optional configurable feature.

Yes, I have it working and am thinking of ways to do even more... like maybe hide (or make read-only) the input boxes for the fields that have data passed via the query string. I need to find a way to keep the end-user from changing the values.

And, Yes, this is very much a security risk... but I am trying to control that with Elgg user access. I guess there could be an option in the field definition to allow for QS values passed? And wether to hide/lock them after the passed value is set.