Can someone guess a PDF submission url and gain access to it?

  • Profile Image
    Asked on June 16, 2015 at 09:45 AM

    I realise that I can link directly to a submission's PDF using the following URL{id}


    This seems really rather insecure to me, I could brute force guess a bunch of IDs to get a load of personal data? Should there not be a bit more security on this?

  • Profile Image
    Answered on June 16, 2015 at 11:52 AM

    Security is very important to us.
    Submissions IDs are made of a combination of 18 digits and this provides a very strong protection as it is virtually impossible to break a code of 18 digits. 

    To break a code of only 4 digits you can have 10.000 different combinations. So even though it may not seem secure an 18 digits number provides a very strong protection. You just need to take care not to share the submissions ID, but as long as they are safe, you can feel safe. As stated before it is virtually impossible to break this code.

    Let us know if we can assist you further.   

  • Profile Image
    Answered on June 18, 2015 at 11:51 AM

    Thanks for the response. I assume that is also the case for the reports link{reportId} although I can add a password to that I can see.

    Is there a link to get a submission as a CSV?


  • Profile Image
    Answered on June 18, 2015 at 12:55 PM

    When generating your CSV report you will be able to get the submission id, as shown below:

    After clicking on Continue button, the next screen will show the Open Report field the link of the CSV report.

    Let us know if we can further assist you.


  • Profile Image
    Answered on June 19, 2015 at 05:08 AM

    Sorry I meant is there a URL for just a singular submission (not all of them).

  • Profile Image
    Answered on June 19, 2015 at 07:10 AM

    No, there is no such feature for formats other than PDF at this time.

    This feature is only available for PDF of your submissions, similarly how at this time you can only attach a PDF file or add a PDF link of your submission to Email Notifications.

    Please let us know if you need further clarifications regarding PDF submissions, or kindly open a new thread for any other questions, we will be happy to help.