What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.

  • Profile Image

    Is my PHP code private?

    Asked by MikePreston on March 12, 2014 at 05:50 AM

    If I understand this correctly, another person can access my form if they guess the jotform address (or if they navigate to the form through my website, of course).  If that other person has a jotform account can they gain access to the PHP code I've incorporated into my form?  It looks like only the owner of the form has the ability to edit the form and therefore only the owner should have access to any code that is associated with that form.  But I just want to be sure.

  • Profile Image
    JotForm Support

    Answered by jonathan on March 12, 2014 at 07:54 AM

    Hi Mike,

    PHP code is server-side. So, the chance of a form user (who have access to the form) of viewing the PHP code (back-end) is NOT likely to happen.

    Only possible way to do so is by intruding the back-end web server(yours) where the PHP codes are located.

    Hope this answers your question. Inform us if you have further inquiry about this.


  • Profile Image

    Answered by MikePreston on March 12, 2014 at 01:29 PM

    What about somebody else on jotform importing the form?  Will my php be accessible to them?

  • Profile Image
    JotForm Support Manager

    Answered by Jeanette on March 12, 2014 at 04:12 PM

    Like Jonathan said, PHP is a server side language, any script you make,  will be hosted in your servers and running from your servers

    Not sure what you mean by "import" the form. Nobody would do that.

    You are probably referring to "clone" the form And still, if anybody do that, the script is in your servers and nobody running a client-side application (such as web browsers) can get it, unless someone does  an instrussion to your servers where the PHP code is located

    The form can  have the URL (the location) to your PHP script, not the script itself.