Index: branches/5.2.x/core/kernel/db/cat_event_handler.php
===================================================================
diff -u -N -r15045 -r15049
--- branches/5.2.x/core/kernel/db/cat_event_handler.php	(.../cat_event_handler.php)	(revision 15045)
+++ branches/5.2.x/core/kernel/db/cat_event_handler.php	(.../cat_event_handler.php)	(revision 15049)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: cat_event_handler.php 15045 2012-01-16 13:56:58Z alex $
+* @version	$Id: cat_event_handler.php 15049 2012-01-16 15:22:04Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -2104,7 +2104,7 @@
 			$object =& $event->getObject(Array ('skip_autoload' => true));
 			/* @var $object kDBItem */
 
-			$object->SetFieldsFromHash($field_values);
+			$object->SetFieldsFromHash($field_values, $this->getRequestProtectedFields($field_values));
 			$field_values['ImportFilename'] = $object->GetDBField('ImportFilename'); //if upload formatter has renamed the file during moving !!!
 			$field_values['ImportSource'] = 2;
 			$field_values['ImportLocalFilename'] = $object->GetDBField('ImportFilename');
@@ -2484,7 +2484,7 @@
 						$cloned_ids = $temp_handler->CloneItems($event->Prefix, $event->Special, Array($original_id), null, null, null, true);
 
 						$object->Load($cloned_ids[0]);
-						$object->SetFieldsFromHash($field_values);
+						$object->SetFieldsFromHash($field_values, $this->getRequestProtectedFields($field_values));
 
 						// 1a. delete record from CategoryItems (about cloned item) that was automatically created during call of Create method of kCatDBItem
 						$ci_table = $this->Application->getUnitOption('ci', 'TableName');
@@ -2505,15 +2505,15 @@
 					}
 					else {
 						// 2. user has pending copy of live item -> just update field values
-						$object->SetFieldsFromHash($field_values);
+						$object->SetFieldsFromHash($field_values, $this->getRequestProtectedFields($field_values));
 					}
 
 					// update id in request (used for redirect in mod-rewrite mode)
 					$this->Application->SetVar($event->getPrefixSpecial().'_id', $object->GetID());
 				}
 				else {
 					// 3. already editing pending copy -> just update field values
-					$object->SetFieldsFromHash($field_values);
+					$object->SetFieldsFromHash($field_values, $this->getRequestProtectedFields($field_values));
 				}
 
 				if ($object->Update()) {