How to receive Twilio Messages in Zoho Creator.

The Problem:

You would like to post the incoming messages to Twilio into Zoho Creator form. Twilio allow specifying a webhook url to post the message data when an incoming sms is received.

Is this possible? You do not want to use any intermediate php or any code?

The Answer:

Yes, it is possible.

Step 1: Create Form fields to receive Twilio Response

Check Twilio’s webhook response parameters and create field names with exact same names. Refer to

Step 2: Set up Webhook in Twilio to POST to Zoho Creator

Go to Twilio’s phone numbers page and set up Incoming message action to post to Zoho Creator. Refer to Zoho Creator REST API ->

Step 3: Setup Done. Send a Message

And you will see the message in your Zoho Creator Report.

Read More

How to keep XML RPC API Auth Token private in a public form?

The Problem:

You have a public form that we wish to add records into a creator application including is’t subform).

You are able to successfully submit our form data into Creator using the XML RPC API, with the data structure as per the support doc examples –

Now the question is how do you keep the Auth Token private? Anyone who inspects the source code of the form will be able to view the auth token and username.


The Answer:

You can create a server file (php or nodejs or any other server page of your choice), to act as a middleware and handle the data post to Zoho Creator. This allows you to store private information on your server so it’s not visible to client. Here’s what I would do in a php file.

file_name: add_record.php


define(“authtoken”, “yourAuthToken”);
define(“zc_ownername”, “yourZohoUserName”);
$xml_string = $_REQUEST[“XMLString”];

//Add to Zoho

function insert_record($xml_string){
$api_url = “”;
$post_params = array();
$post_params[‘authtoken’] = constant(“authtoken”);
$post_params[‘scope’] = ‘creatorapi’;
$post_params [‘XMLString’] = $xml_string;
$post_params[‘zc_ownername’] = constant(“zc_ownername”);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $api_url);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 30);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_params);
$result = curl_exec($ch);

You can post your form to add_record.php instead of url

Read More