How to have a jotform form opened over our own website URL without being embedded?

  • twphotog
    Asked on February 23, 2016 at 11:10 AM

    I have several forms that I've created where I've used/applied the custom url to include my business name. Example:

    http://forms.teriwalizerphotography.com/form/51194271365152.

    I forgot how to customize the url (DNS already established thru GoDaddy). The search results seem old to me.

    Thanks!

     

  • Nik_C
    Replied on February 23, 2016 at 2:38 PM

    Hi,

    You can change your custom URL by going to the Form Builder and clicking on Publish button, then you can follow the guide i provided. Just enter the URL you want and click apply.

    How to have a jotform form opened over our own website URL without being embedded? Image 1 Screenshot 20

    If you want to reset your URL to default value on Jotform, just click on button to the right of button for edit.  

    Note: Button for reset only shows if you changed URL from default value to custom.

     

    Please let me know if this works for you.

     

    Best regards.

  • twphotog
    Replied on February 24, 2016 at 10:41 AM

    Sorry for my confusion but previously when I created a custom URL, the actual URL contained the following: "forms.teriwalizerphotography.com"...as indicated below.

    http://forms.teriwalizerphotography.com/form/51194271365152.

    Your instructions do not show the removal of "form.jotform.com" to my customized URL,  "forms.teriwalizerphotography.com".

    I just edited the form above to see what is listed in the Link field in the Publish section and it appears as follows:

    https://form.jotform.com/twphotog/http://forms.teriwalizerphotography

    As expected when you click this link, you get an error message.

    What format I should follow so that the link I provide to clients only shows "forms.teriwalizerphotography.com" and not the form.jotform.com?

    Thanks!

     

  • Ben
    Replied on February 24, 2016 at 1:12 PM

    You are actually referring to the following guide: How to use Custom Domains with Jotform

    It is however important to note few things:

    1. Your form will still have its standard form URL as such:

    http://form.jotform.com/form/51194271365152

    It is up to you to manually add a new entry into the DNS setup on your server (based on your post through GoDaddy) and have it set up to work with the forwarding rules that you have.

    In your case the subdomain is "forms" and of course the website is your own "teriwalizerphotography" instead of "jotform", ending up with this:

    http://forms.teriwalizerphotography.com/form/51194271365152

    2. All form URLs are at this time secure by default. This is very important for the above setup because if you use a form over HTTPS, you will not be able to accomplish the same.

    Instead, you need to make sure that your call is always done over HTTP as your previous link.

    Hope this helps, but if you have any questions do let us know.

     

  • twphotog
    Replied on February 24, 2016 at 1:35 PM

    Ok, so I have a couple more questions:

    1. Are you saying that all my forms with a custom domain are NOT secure because they go over http instead of the default assigned by JotFom which is https? (I'm confused about #2 above in your reply.)

    2. If my custom domain forms ARE secure, is there a way to list the form name as opposed to the form number?

    If my forms are not secure, I'll revert back to the secure method thru JF.

    Thanks in advance for the clarification!

     

     

  • Ben
    Replied on February 24, 2016 at 3:02 PM

    I apologize for the confusion, and I will go over each question in order to avoid the same:

    1. Are you saying that all my forms with a custom domain are NOT secure because they go over http instead of the default assigned by JotFom which is https? (I'm confused about #2 above in your reply.)

    In practice there are many websites using their forms and doing all their work over HTTP (non secure protocol) while there are more and more doing everything over HTTPS (recommended and secure protocol).

    The difference is that with HTTP, if someone was to watch your website and the data going in and out, they would be able to do that quite easily and there are tons of (free) tools that would allow this.

    If you have HTTPS that means that a lot of work would be needed to do the same - if it is at all possible (this depends on various factors, but it can be seen as not possible).

    If the data that you accept over your form is data that is not considered as sensitive data then you could continue using HTTP, however it is a best practice to use HTTPS whenever possible.

    This means that it is up to you which one you should use. However DNS hack that you were using can not be used with secure URLs since browser will see that as possible phishing or another form of attack (depends on the browser what the exact error would be).

    - You can try it if you wish, nothing will happen to you if you do try it to see what I mean.

    2. If my custom domain forms ARE secure, is there a way to list the form name as opposed to the form number?

    Form number/id should be used, since otherwise your username would need to be passed within the URL of your form.

    So this:

    http://forms.teriwalizerphotography.com/form/51194271365152

    Might be

    http://forms.teriwalizerphotography.com/twphotog/form_title

    - However the custom form name is not intended to be used in a combination with custom domain and as such some issues might be caused by some possible changes in custom domains function, so I would not recommend using the same.

    If my forms are not secure, I'll revert back to the secure method thru JF.

    Thanks in advance for the clarification!

    I would just like to summarize here about the security of your form. HTTP is the way internet worked for a very long time and HTTPS is becoming more and more present on internet for all the benefits that it provides, however if your forms are collecting non sensitive data, you might want and be OK with the form opening over HTTP.

    This is still a standard protocol, but it is often referred to as "non secured" as well when used in same text that mentions HTTPS.

    I hope that this helps.

    I would also like to mention that you can quite easily embed any form on your website using the iframe embed (for example) and no one would even be able to tell that the form is being called from JotForm.

    For reference: How to get the jotform iFrame Code

    Hope this helps.

  • twphotog
    Replied on February 24, 2016 at 3:05 PM

    Thanks so much for such a detailed response! I will definitely change all of my forms back to the JF format to keep up with the most secure methods.