@see http://cgit.drupalcode.org/webform/tree/FEATURE_REQUEST_TEMPLATE.html

Confirmation Page URL does not include SID or UUID

Our marketers are having a tough time identifying and pairing our form submissions with Google Analytics data. In version 7, the confirmation URL passed the SID along with it which made it easier for them to pair a conversion with a specific submission. In version 8, I am so far unable to make that happen. I tried to accomplish this using submission tokens (ie:/[webform:id]/[webform_submission:sid]) in the "Confirmation Type" section of by choosing " URL (redirects to a custom path or URL)". That did not work, because it is not a valid URL to begin with.

Am I missing something, or is this new way of formatting the confirmation URL simply the new way things are done?

Please point me in the right direction, if there is such a path to that solution.

If there is a way to accomplish this within the interface, I would very much appreciate some pointers. If not, perhaps this could be a feature to add down the road.

-thanks,
Eric

CommentFileSizeAuthor
#10 webform.webform.issue_2973414.yml4.57 KBjrockowitz
#5 Issue 2973414 Is it possible to rewrite the confirmation page URL to include the SID or UUID Webform Demo Site.png146.48 KBjrockowitz
#4 Screen Shot 2018-05-17 at 12.49.11 AM.png150.18 KBjrockowitz
#2 webform.webform.issue_297341.yml3.39 KBjrockowitz

Comments

ericroks created an issue. See original summary.

jrockowitz’s picture

jrockowitz commented
Status: Active » Needs review
StatusFileSize
new webform.webform.issue_297341.yml3.39 KB

In D8 a unique token is being passed to the confirmation page. Using a token is more secure than a sid because people can't guess it.

You can use tokens in the confirmation URL to pass the sid to the confirmation page. Please see the attached webform.

ericroks’s picture

ericroks commented

confirmation_url: '[webform:url]/confirmation?sid=[webform_submission:sid]'

the above line will generate a dynamic URL that reflects the original URL as well as the Submission ID. Is that correct? And if so, where do i put it?

I thank you in advance.

jrockowitz’s picture

jrockowitz commented
StatusFileSize
new Screen Shot 2018-05-17 at 12.49.11 AM.png150.18 KB

Wrong image

jrockowitz’s picture

jrockowitz commented
StatusFileSize
new Issue 2973414 Is it possible to rewrite the confirmation page URL to include the SID or UUID Webform Demo Site.png146.48 KB

ericroks’s picture

ericroks commented

Thank you very much. This works nicely.

jrockowitz’s picture

jrockowitz commented
Status: Needs review » Closed (works as designed)
bwoods’s picture

bwoods commented
Issue tags: -

Thank you for documenting this - I needed the exact same thing but had the syntax wrong for the token value.

coxy0001’s picture

coxy0001 commented

Am really sorry for posting this here, but this is the closes forum topic I can find and thought you may be able to help or point me in the right direction.

So, webform confirmation page =
http://localhost/sitename/form/contact/confirmation?sid=5f9902db-8f19-42...

Email notification that gets sent:
http://localhost/sitename/admin/structure/webform/manage/contact/submiss...39?sid=5f9902db-8f19-4253-8de5-e91f2127c058

How do I "remove" the webform submission number (39 - bolded above). The problem I'm facing is that anyone can simply change this number and see a form submission.

jrockowitz’s picture

jrockowitz commented
StatusFileSize
new webform.webform.issue_2973414.yml4.57 KB

The problem I'm facing is that anyone can simply change this number and see a form submission.

The attached webform display the view and update token URL on the confirmation page. When testing the view and update URL the sid and token must match. Users are NOT able to change the sid the view other submissions. If you want users to access view/update submission URLs without the sid being visible, you are going to have to write a custom controller that uses just the token.