Your Innkept code is visible to anyone who looks at your web page, so it isn't a secret. Allowed domains stop anyone else copying it onto their own site and filling your inbox with fake enquiries.
How it works
Once you've listed your domains, the booking form only works on those websites. Anywhere else, it won't load and can't send enquiries.
If you haven't listed any domains, the form works on any site that has your code. We recommend adding your domain as soon as you go live.
Adding your domains
- Open Widget and open one of your forms.
- Click Your Innkept code.
- Under Allowed domains, type your website address, e.g.
fettlewoodbarn.co.uk, and add it. - Click Save changes.
The list applies to all your forms, because they share the same code.
Covering every part of your site
Start a domain with *. to cover your whole site. *.fettlewoodbarn.co.uk
covers fettlewoodbarn.co.uk, www.fettlewoodbarn.co.uk and
book.fettlewoodbarn.co.uk.
Testing a new website
If your web person is building a new site on a test address, add that address too while they work, then remove it once the new site is live.
What guests see on a site that isn't allowed
The form shows: "This booking form isn't available right now. Please try again later." If you see this on your own site, check your website address is on the list exactly as it appears in the browser.
What it doesn't protect against
Allowed domains stop casual misuse. Someone determined can still send fake enquiries outside a browser, but they'll run into our limits on how many enquiries can be sent each minute. If you're seeing unusual enquiries, contact us and we'll look into it.