Explain how form only displayed when Thank You redirect is done was submitted

My Automated Payment form (https://www.jotform.com//?formID=53253981193965) is only presented as a Thank You page redirect when someone selects PayPal as their payment method on one of my many order forms (e.g. https://www.jotform.com//?formID=53365702790963).  I have no web page that presents it directly.  This morning, the owner of the website received a notifier email from my Automated Payment form which was empty of data.  He received no email from any order although one must be submitted for a user to even see an Automated Payment form.  Is there some way I can find out how this happened?

Thanks for any assistance you can provide.

It looks like you have received an incomplete payment: http://www.jotform.com/help/564-how-to-view-incomplete-payments-of-your-payment-forms/

The email was sent since you have setup to send the email alerts even if the payment is not completed:

If you haven't enable IPN(Instant Payment Notification), I would recommend you to do it: http://www.jotform.com/help/276-How-to-Enable-IPN-for-Paypal

Let us know if you need more help.

Thanks.

The issue is that a user accessed my Automated Payment form without going through a website order.  No emails were received from any of my order forms, but the only way an Automated Payment form is presented is when an order is submitted and the Thank You redirects to that form.  The fields on the Automated Payment form are populated by parameters on the link invoked by submitting an order.  The form was empty.  Not only did no order email get sent (indicating that none was submitted), but my website stat tracker showed that no order page was presented to the user who submitted the blank payment form. The only page the stat tracker listed was the custom thank you page that is presented AFTER the Automated Payment form is submitted and the user returns from PayPal.

I have changed an amount field on the Automated Payment form to be required so a user should not be able to submit an empty payment form again.  However, I'd like to understand how this form could be presented to a user without his having gone through one of my orders.  Do you have any ideas?

Perhaps, it's just a test or someone had your form and submitted it since your fields are not required before.

I looked up your previous threads and you have provided us some forms. We can check this further. Can you forward us the email for the submission? Or, get the full header of the email and post it here.

http://mxtoolbox.com/Public/Content/EmailHeaders/

Here below is the email header although I don't understand how looking at it will enlighten you on how the sending form was presented to someone (with IP address in Spain) without being invoked by one of our order forms.  (I identified a sample order form in my first post above.)  The only way I know of to get to the form is via an order form or directly at : https://form.jotform.com/53253981193965

Delivered-To: ryan@madsails.com Received: by 10.157.40.230 with SMTP id s93csp1930338ota; Sun, 13 Mar 2016 03:58:13 -0700 (PDT) X-Received: by 10.55.72.196 with SMTP id v187mr22968908qka.97.1457866693213; Sun, 13 Mar 2016 03:58:13 -0700 (PDT) Return-Path: <010001536fa0580e-dfb3e821-c242-4877-a6e6-d25ce7c24478-000000@amazonses.com> Received: from a11-10.smtp-out.amazonses.com (a11-10.smtp-out.amazonses.com. [54.240.11.10]) by mx.google.com with ESMTPS id q67si1915640qgd.110.2016.03.13.03.58.13 for <ryan@madsails.com> (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 13 Mar 2016 03:58:13 -0700 (PDT) Received-SPF: pass (google.com: domain of 010001536fa0580e-dfb3e821-c242-4877-a6e6-d25ce7c24478-000000@amazonses.com designates 54.240.11.10 as permitted sender) client-ip=54.240.11.10; Authentication-Results: mx.google.com; spf=pass (google.com: domain of 010001536fa0580e-dfb3e821-c242-4877-a6e6-d25ce7c24478-000000@amazonses.com designates 54.240.11.10 as permitted sender) smtp.mailfrom=010001536fa0580e-dfb3e821-c242-4877-a6e6-d25ce7c24478-000000@amazonses.com; dkim=pass header.i=@amazonses.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1457866692; h=From:Reply-To:To:Subject:MIME-Version:Content-Type:Message-ID:Date:Feedback-ID; bh=Bhkx03ELSCnBr5R+bUX/f8NRTG3zwCYLCasVNpbkOWE=; b=YQ8jrjKDOi/o8T0tCZdQjE8hVXceh+xZv1x5sTiiMpDWe2Oz3mNYeTMxV29tPFMu 91oemn2KeCnD3FxAcYRYHq/UcA11CpGWtS+oMpUQ2pFIDv6auFCSzGT78ZExzTMsG6q KErDelprD+pBRXa3jozBeAEo6V6KzT5sd/SxCIf0= From: =?UTF-8?B?Y25j?= <noreply@formresponse.com> Reply-To: pruebas@sanmarino.es To: ryan@madsails.com Subject: Mad Sails Order Automated Payment - cnc MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_1776832_2095723151.1457866692624" Message-ID: <010001536fa0580e-dfb3e821-c242-4877-a6e6-d25ce7c24478-000000@email.amazonses.com> Date: Sun, 13 Mar 2016 10:58:12 +0000 X-SES-Outgoing: 2016.03.13-54.240.11.10 Feedback-ID: 1.us-east-1.PcG58vmKKnMKwGfyaVwIZvGuGnKOc+Mfp+E1EwcIAaY=:AmazonSES------=_Part_1776832_2095723151.1457866692624 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bitThe following payment for an order from Mad Sails was submitted to PayPal. Payment ID 333675892222696810 Payment Submitted on 2016-03-13 06:58:12Buyer: Name vcnc cnc E-mail Address pruebas@sanmarino.es Phone Number Payment: Order Amount Pay Deposit or Full Amount? Full Amount Payment Amount ------=_Part_1776832_2095723151.1457866692624 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

The following payment for an order from Mad Sails was submitted to PayPal.

Payment ID 333675892222696810

Payment Submitted on 2016-03-13 06:58:12

Buyer:
Name vcnc cnc
E-mail Address pruebas@sanmarino.es
Phone Number

Payment:
Order Amount 
Pay Deposit or Full Amount? Full Amount

Payment Amount

------=_Part_1776832_2095723151.1457866692624--

The submitter must have just access the form directly using its URL https://form.jotform.com/53253981193965

So you will get an incomplete payment submission and and incomplete Notification email.

Can you tell us also the URL of the previous form that the user used? The one that should redirect to the Paypal form https://form.jotform.com/53253981193965

Perhaps we an traced the steps the user had taken and we can identify how the payment form was triggered.

As I said previously, the user did NOT access any previous form.  I also can't imagine the user entering the jotform URL.  I guess we'll never know how this happened.

When I've checked tour submission I've found related submission.

I've also cloned and tested your form. I see that your Payment tool is not required. Because of that reason, you can submit your form even if you don't fill that field.

If you have any question or issues, please do not hesitate contacting us. We will be glad to assist you.