We are facing an issue where mistakenly new records are getting created via Preference Center and Unsubscribe page. We have tried resolving this via Email Auto fill by creating a script but since these marketo landing pages are being rendered on the website via iframe they aren't letting the script populated email addresses.
Is there any other way out someone can think of to ensure this can be managed properly.
Thanks for your assistance !!
Are you able to figure out how people who are not existing in your database are getting to your preference center/unsubscribe pages? Usually, these types of pages should only be provided via email or another internal source so that not just anyone can stumble across them and fill them out.
@torijeffers when a Preference Center offers an editable Email Address field, even if people only reach the page via links in Marketo emails, they can still change the Email Address value and thus create new leads.
The better practice is to lock the Email Address against editing by the end user. You can still display it to them, just don’t let them mess with it.
We have tried resolving this via Email Auto fill by creating a script
We’re lacking information still. What script... and why would you need JS, when in fact you can just have the Email Address field be Hidden w/native Pre-Fill on?
Also, if you’re IFRAME-ing LPs — really not recommended in any modern setup — simply add the script to the LP! Not clear on what other setup you tried.
What script do you have on your Preference Center page?
Well, you can display only the lead Email Address token value instead of the field, and if the token is empty disable the Submit button using the Mkto forms JS. In case a person doesn't have a Munchkin session associated with their lead record, they won't be able to submit the form. Clicks (of course, on the tracked links) on the Marketo email associate the Munchkin session with their known record in the database, so you should not have any trouble with people actually clicking the Unsubscribe link from an email. The token will be empty in case a person's session isn't associated, and they won't be able to submit the form.