Appnitro Software Forums » MachForm

hiding form number in URL

(3 posts)

  1. I notice the hosted form is accessed with a URL similar to:

    http://www.appnitro.com/demo/view.php?id=6

    A user can potentially fill out other forms (some sensitive) by changing the id in the URL. Can view.php be called with POST instead of GET?

    Or, what about using a GUID type number for the forms? It would be a lot harder to guess '1032-AE80-107362788158787616-A732' than '6'

    Posted 2 years ago #
  2. use the embed feature?

    Posted 2 years ago #
  3. Yes, using the embed code (particularly the Advanced Embed Code), you can hide the URL to your form.

    If you have very sensitive form, I suggest to make it password protected. Simply go to your form properties and set the password.

    Posted 2 years ago #

RSS feed for this topic

Reply

You must log in to post.