Hackers for Reverse Engineering

I developed a website and made some of the user data form fields non editable, say first name, last name etc. Though the fields are non editable, somehow the users were able to update the fields. I need to know what is the flaw and how they were able to modify the form data. Need entire steps on how this issue can be replicated, so that the devs can address it.