What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    Can someone guess a PDF submission url and gain access to it?

    Asked by ca3 on June 16, 2015 at 09:45 AM

    I realise that I can link directly to a submission's PDF using the following URL

    http://www.jotform.com/pdf-submission/{id}

    or 

    https://www.jotform.com/pdf-submission/{id}

    This seems really rather insecure to me, I could brute force guess a bunch of IDs to get a load of personal data? Should there not be a bit more security on this?

    direct JotForm force submission PDF PDF submission
  • Profile Image

    Answered by Carina on June 16, 2015 at 11:52 AM

    Security is very important to us.
    Submissions IDs are made of a combination of 18 digits and this provides a very strong protection as it is virtually impossible to break a code of 18 digits. 

    To break a code of only 4 digits you can have 10.000 different combinations. So even though it may not seem secure an 18 digits number provides a very strong protection. You just need to take care not to share the submissions ID, but as long as they are safe, you can feel safe. As stated before it is virtually impossible to break this code.

    Let us know if we can assist you further.   

  • Profile Image

    Answered by ca3 on June 18, 2015 at 11:51 AM

    Thanks for the response. I assume that is also the case for the reports link https://www.jotform.com/excel/{reportId} although I can add a password to that I can see.

    Is there a link to get a submission as a CSV?

    e.g. http://www.jotform.com/csv-submission/{id}

  • Profile Image
    JotForm Support

    Answered by Aury on June 18, 2015 at 12:55 PM

    When generating your CSV report you will be able to get the submission id, as shown below:

    After clicking on Continue button, the next screen will show the Open Report field the link of the CSV report.

    Let us know if we can further assist you.

     

  • Profile Image

    Answered by ca3 on June 19, 2015 at 05:08 AM

    Sorry I meant is there a URL for just a singular submission (not all of them).

  • Profile Image
    JotForm Support

    Answered by Boris on June 19, 2015 at 07:10 AM

    No, there is no such feature for formats other than PDF at this time.

    This feature is only available for PDF of your submissions, similarly how at this time you can only attach a PDF file or add a PDF link of your submission to Email Notifications.

    Please let us know if you need further clarifications regarding PDF submissions, or kindly open a new thread for any other questions, we will be happy to help.