Form submissions - Public files?

Marketing & Content Hub Lead Capture Tools
,
1

Hi there,

I have a question related to uploading files through form submission.

When a file (e.g. pdf) is uploaded through a form and is linked to the contact, it looks like this file is public (see image below). Also when I copy the link and go to an incognito brower, I can access the file.

41318iF9B5FA69C7069D45.png
41318iF9B5FA69C7069D45.png399×129 16.6 KB

Can somene please help me understand if/how I can make these type of files private? (since I cannot change the settings of this file like I can do for files I upload myself..)

Or how accessible these files are? Can they be indexed?

Thanks for the help!

2

Hi @Maeglin,

When a file is uploaded through a website form, the URL that is stored in the property should look like this: https://api.hubspot.com/form-integrations/v1/uploaded-files/signed-url-redirect/ When I just tested this, I was not able to access files without being logged in.

The same happens when I tried to open the link for a file manually attached in the right sidebar of a record, I was also prompted to log in.

Could you give more context where you took this screenshot? If this is the file manager (Menu > Marketing > Files and Templates > Files), then there are options to set the visibility of the file. (I would not recommend to store files submitted by contacts here.)

41320i364D7C088E655D50.png
41320i364D7C088E655D50.png182×218 7.18 KB

Best regards!

3

Hi Karsten,

thanks for your reply! You’re right, via the Files I need to login too.

However, when I’m viewing the uploaded document on the Contact page, there is a link generated for the file that starts with cdnp.hubspot.net/hubfs/xxxx/form-uploads/and then a whole bunch of other numbers.

This seems to be the same file that can be viewed in the Files, but this doc is also accessible when viewed incognito.

Can you help me understand how this works and/or how safe this is?

Here is an example of a test-upload I created and the link that can be viewed (also incognito).

4

Hi @Maeglin,

Could you share a screenshot of where exactly you are accessing the link of the uploaded document?

Cheers

5

Hi Karsten, how can i make file links Public when a form is submitted?

6

How would you make it so that the images are public and can be viewed without being logged in?

I’m pulling images from form submissions via the Forms API and need to display them on a webpage that non-HubSpot users need to be able to view, but I’m getting the same url structure you detailed and the images only show for logged in HubSpot users that have access to the account.

7

Hi @karstenkoehler, I’m accessing from here:

41500i6632A8D9DA5583A6.png
41500i6632A8D9DA5583A6.png301×399 46 KB

8

Thanks @Maeglin, I was able to reproduce this behavior. I’d recommend reaching out to HubSpot technical support about this – it seems like this link is set to expire (see the utm parameter ?expires= ) and it breaks when all the parameters are removed. Still, it’s a bit ominous that this link could be shared with people who are not logged in, making it a potential data protection risk factor.

Best regards!

9

Hi @karstenkoehler , your reply is really appreciated! I’ll reach out to the technical support.

Thanks!