Integration guide · SpamKill Transformer

Protect your SuiteCRM form from bots

In short: To stop spam on a SuiteCRM web form, create a Person Form under Campaigns, copy its code, run it through the SpamKill Setup Wizard and paste the protected code on your page. SpamKill checks every submission without a CAPTCHA and real enquiries still become SuiteCRM leads, linked to your campaign. It takes about 15 minutes.

Bots are filling your SuiteCRM web form with fake leads. Protect a SuiteCRM Person Form with SpamKill and real enquiries keep arriving as leads, linked to your campaign, in the same SuiteCRM styling.

  • About 15 min
  • 7 steps
  • Copy and paste one snippet

Last verified on SuiteCRM 8 (hosted) Person Form with the SpamKill Setup Wizard

What changes, and what doesn't

Stays the same
  • Enquiries still arrive in SuiteCRM as leads
  • The campaign link, Redirect URL and lead owner
  • SuiteCRM's look for the form
What's added
  • Every submission is checked before it reaches SuiteCRM
  • No CAPTCHA for your visitors
  • Undo it anytime by putting your old form code back
Done this before? Quick setup: one line per step. First time? Start here. Step by step, with a screenshot for every click.

Before you start

Have these ready so nothing stops you halfway.

  • A SpamKill accountNo account yet? Start a free trial.
  • A SuiteCRM user that can use CampaignsYou'll create a campaign and a Person Form under Campaigns.
  • A way to edit your page's HTMLYou'll paste HTML code, so use an HTML or code block in your site editor.

Quick setup

For returning users. Each line links to its full step.

  1. In SuiteCRM, open Campaigns › Create Campaign, enter a Name, set Status to Active, pick an End Date and click Save. Step 1
  2. Open Campaigns › Create Person Form, drag your fields into First Form Column, click Next, set Redirect URL and Related Campaign, then click Generate Form. Step 2
  3. Click Save Web Form, then copy all the code in the box on the next page. Step 3
  4. In the SpamKill Console, open Setup Wizard, click No to the WordPress question and paste the code. Step 4
  5. Click Generate Protected Code, check the email field is email1, then click Yes, protect my form. Step 5
  6. Copy the protected code, paste it where the form should go, publish the page, then click Next. Step 6
  7. Submit [email protected] and expect an error, then submit a real enquiry and check Leads. Step 7
Step 1 of 7 · In SuiteCRM

Create a campaign

Where: SuiteCRMCampaignsCreate Campaign

A Person Form has to be linked to a campaign. In SuiteCRM, point to Campaigns in the top menu and click Create Campaign. Enter a Name, such as Website contact form (1). Set Status to Active (2) and pick an End Date (3): SuiteCRM won't save the campaign without one. Click Save.

SuiteCRM's Create Campaign form with the name Website contact form
1Name
The same form with Status Active, an End Date and the Save button
2Status: Active3End Date

You should see: Your campaign's page, with Status Active.

Already have an active campaign for your website?

Use it and go on to step 2.

Finished step 1?
0 of 7 steps done
Next: Build the Person Form ↓
Step 2 of 7 · In SuiteCRM

Build the Person Form

Where: SuiteCRMCampaignsCreate Person Form

Point to Campaigns and click Create Person Form. Keep Leads selected. Drag the fields you want from Available Fields into First Form Column (1), including Email Address, and click Next (2). Put your thank-you page in Redirect URL (3). Next to Related Campaign, click Select (4) and pick your campaign. Click Generate Form.

The Person Form builder with First Name, Last Name, Email Address, Account Name and Description in First Form Column
1First Form Column2Next
The form settings with a Redirect URL and the Related Campaign Website contact form
3Redirect URL4Related Campaign: Select

You should see: A preview of your form, with a Save Web Form button above it.

Finished step 2?
0 of 7 steps done
Next: Copy the form code ↓
Step 3 of 7 · In SuiteCRM

Copy the form code

Where: SuiteCRMCampaignsPerson Form

Check the preview and click Save Web Form (1). On the next page, click in the box of code under Or copy and paste the html below into an existing page (2), select all of it and copy it.

The form preview with the Save Web Form button
1Save Web Form
The page with the form's HTML in a box under Or copy and paste the html below into an existing page
2The form code

You should see: The form code on your clipboard. It starts with <html lang='en_us'>.

Finished step 3?
0 of 7 steps done
Next: Paste it into the Setup Wizard ↓
Step 4 of 7 · In SpamKill

Paste it into the Setup Wizard

Where: SpamKill ConsoleSetup Wizard

In the SpamKill Console, click Setup Wizard in the sidebar. If your site isn't on WordPress, click No under Is your website developed in WordPress?. Paste the whole form code into the box (1).

The Setup Wizard with the SuiteCRM form code pasted in the box
1Paste the code

You should see: Tips under the box, then Generate Protected Code.

Finished step 4?
0 of 7 steps done
Next: Generate the protected code ↓
Step 5 of 7 · In SpamKill

Generate the protected code

Where: SpamKill ConsoleSetup Wizard

Click Generate Protected Code. SpamKill asks you to check the email field: it should be email1 (1). Click Yes, protect my form (2).

The Check the email field dialog with email1 selected and a Yes, protect my form button
1email12Yes, protect my form
Replace the existing code with this code on your website, above the protected form code

You should see: Replace the existing code with this code on your website, above your protected code.

Finished step 5?
0 of 7 steps done
Next: Put the code on your page ↓
Step 6 of 7 · On your website

Put the code on your page

Where: Your website editor

Copy the protected code. Open your contact page in your website editor and paste the code where the form should go, replacing any old SuiteCRM form code. Save and publish the page. Then click Next in the wizard.

A page showing the protected SuiteCRM form with its blue header and First Name, Last Name, Email Address, Account Name and Description fields

You should see: Your page shows the form in SuiteCRM's styling, with a Submit button.

Does your site style the form by field name?

SpamKill renames the fields, and the wizard lists the old and new names. Update any CSS or scripts that point at the old names. SuiteCRM's own styling uses the form's id, which SpamKill keeps.

Finished step 6?
0 of 7 steps done
Next: Test it twice ↓
Step 7 of 7 · On your live form

Test it twice

Open your page in a private window. Submit the form with [email protected] (1). Then submit it again with your own details. You land on your Redirect URL, and the enquiry appears under Leads (2) with its company and message (3), linked to your campaign.

SpamKill's That email address doesn't look right page with a Go back to the form button
1Blocked by SpamKill
The new SuiteCRM lead with its Account Name and Description, and one campaign under Relationships
2Your test lead3Company and message
On your page

The first try shows That email address doesn't look right.

In SuiteCRM

The second try appears under Leads, with every field you filled in.

In SpamKill

Back in the wizard, click Both Tests Passed.

You should see: Your thank-you page after the second try.

Finished step 7?
0 of 7 steps done

Your SuiteCRM form is protected

  • Bots are stopped before they reach SuiteCRM.
  • Real leads arrive exactly as before, with no extra steps for them.
  • Every block is logged in your SpamKill dashboard.
Open your dashboard

Something not working?

Find what you're seeing.

My thank-you page's address ends with the visitor's details

That's SuiteCRM: it adds every field from the form to the end of your Redirect URL, with or without SpamKill. Your thank-you page still loads normally.

The form submits, but no lead appears in SuiteCRM

Check the live page has the protected code: its form sends to protect.spamkill.dev. Then check you copied the code from the page after Save Web Form, and that its campaign still exists.

A real visitor was told their email doesn't look right

SpamKill checks for missing @ symbols, extra spaces and common typos. The visitor can click Go back to the form, fix the address and send again.

I want different fields

Build a new Person Form with the fields you want, then repeat steps 3 to 6 and replace the code on your page.

Changed your mind? Undo in under a minute

  1. Open the page in your website editor.
  2. Delete the SpamKill code and paste your original SuiteCRM form code back.
  3. Save and publish the page. Your form is back to how it was.
Did this guide work for you?

Stuck? We'll set it up with you.

Free setup help for every plan. Send us a message and we'll walk through your SuiteCRM form with you.

Get setup help