What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    restricting access to prevent phishing

    Asked by paulalexanderbreen on December 14, 2013 at 09:08 AM

    Hi

    This is probably a question you have been asked loads of time but here goes anyway.

    I've got a simple idea that may work but need your imput please.

    I use one of your forms on a web site I've constructed, the form is on a page that you need a password to access (so far so good)

    The first question on the form is enter your customer reference number. When the form is submitted I use this in a vlookup table to identify the customer.

    What i would like to do is use your conditioning tool to hide the rest of the form (or at least the submission button) until the customer ID has been checked. The reason for this is to prevent spurius submissions, introduce a level of security and if possible make our customers feel special as when they enter thier unique ID i'd like to display a welcome message with thier name.

    This would be easy to do using simple look up functions, can this be done?

    regards

    Paul

    Submissions name unique id message
  • Profile Image
    JotForm Support

    Answered by jonathan on December 14, 2013 at 03:22 PM

    Hi Paul,

    You can use this guide How-to-Hide-or-Show-Multiple-Fields-at-Once-Based-On-a-Single-Conditional-Entry

    Here is als a demo form you can test. Use the code 'test123' for reference number.

    One thing you have to be aware here is, the text in the form are not encrypted.
    If you view the form's source, you will notice that it is only on plain text.

    What I am saying is, anyone who have sufficient technical knowledge to view the form's code using the browser can be able to find out what is the 'customer id' or 'reference number'

    BUT since your website requires login mechanism already, then it is already an added security that prevent just anyone or the public internet from having access on your form on your website.

    Inform us if you need further assistance.

    Thanks.