Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в панели.
MODULE FOR 1C-BITRIX
KURATOV
The module provides integration between web forms on a 1C-Bitrix site and the Bitrix24 CRM system via webhook. It enables automatic data transfer from forms to CRM, allows detailed field mapping configuration, duplicate lead detection, and preservation of marketing information.
The module provides integration between web forms on a 1C-Bitrix site and the Bitrix24 CRM system via webhook. It enables automatic data transfer from forms to CRM, allows detailed field mapping configuration, duplicate lead detection, and preservation of marketing information.
The module automates the transfer of leads from 1C-Bitrix website forms to Bitrix24 CRM. Connection to the system is established via webhook authorization using the REST API to create records. An integrated connection error handling mechanism ensures operational stability.
Field mapping is configured through a visual interface, allowing flexible alignment of form fields with any standard or custom CRM fields, including support for multiple fields. Configuration is saved directly to the database.
The system prevents duplicate creation by searching for existing leads based on phone number and email. Upon detecting matches, flexible rules are applied to update existing records rather than creating new ones. The module fully supports the transmission of UTM tags, traffic source preservation, and cookie data for end-to-end analytics. Marketing data is automatically passed to corresponding CRM fields, and a deal is automatically created for each lead.
During data processing, normalization occurs: phone numbers are converted to international format for accurate duplicate detection, while the original input format (including input masks) is preserved. Email and phone number validation is performed. When creating a lead, a responsible manager can be automatically assigned by selecting from the Bitrix24 employee list.
Default responsible user configuration
Lead name assignment
In the field mapping section, you can select a web form field whose data will be used as the lead name when creating a record in Bitrix24 CRM.
The module provides integration between 1C-Bitrix web forms and Bitrix24. The tool simplifies data transfer configuration, offers an intuitive management interface, and reduces implementation time.
When needed, General iT can implement “Lead automation in Bitrix24 from website forms on 1C-Bitrix”, configure the module and verify it against the current website setup.
UPDATE HISTORY
Security fixes.
Incomplete permission check (install/files/test_connection.php): the webhook verification endpoint required only authentication, not administrator rights — unlike the neighboring get_field_mappings.php/save_field_mappings.php. Any authenticated site user could initiate outgoing requests on behalf of the server and write text to the event log. Added a check for $USER->IsAdmin(), as with the neighboring endpoints.
SSRF, residual risk (lib/Ajax/TestConnection.php): the webhookUrl check was supplemented with validation of the path structure (rest/id/code), matching the actual Bitrix24 webhook format. The check was moved to the reusable method TestConnection::isValidWebhookUrl().
Validation desynchronization (options.php): when saving module settings, webhook_url was accepted without validation, whereas TestConnection enforces a strict allowlist for the same purpose. The unvalidated saved value was later used for outgoing requests when processing web forms. Now, the same check (TestConnection::isValidWebhookUrl()) is applied upon saving.
Information leak in the event log (lib/Integration/UtmHandler.php): logUtmData(), in the absence of UTM tags, wrote raw values of cookies utm_*/BITRIX_SM_*, GET parameters, a full dump of $_SESSION, and the session ID in plain text to the Bitrix event log; the event log is readable by all users with access to the section. Now, only the fact of presence and the length of values are logged, without the values themselves. Additionally: the value $_COOKIE['BITRIX_SM_SALE_SL'] is now validated for format before being passed to CSession::GetByID().
Compatibility with PHP 8.2 and security fixes.
The kuratovru_webformintegrationb24 module class did not explicitly declare the $installDir property and wrote to it via $this->installDir, which in PHP 8.2 is marked as deprecated dynamic property creation (deprecated: creation of dynamic property). The property is explicitly declared in install/index.php.
Stored XSS (options.php): CRM field names and web form field names (set by users with CRM/form permissions, not necessarily the site administrator) were inserted into the DOM via innerHTML without escaping when opening the field mapping settings popup. A malicious user's script could execute in the site administrator's browser. Rewritten to safely build the DOM using createElement/textContent.
Fixed the transfer of attached files from the web form to the Bitrix24 lead.
Improved lead source determination via UTM tags.
Security issues resolved: added CSRF token validation and URL validation for the webhook during connection testing, stopped writing debug information to an open site directory, and added output escaping in module settings.
USER EXPERIENCE
How does this solution work in a real project? Share your experience and help others choose.
There are no reviews of this solution on git.ru yet. Tell us what worked well and what could be improved.
Verified purchaseAdd a key if you wish. A verified review gets a badge, priority placement and more rating weight.
Open to every clientJust sign in to your account. A key is optional; all reviews are moderated.
YOUR PROJECT INFRASTRUCTURE
FROM THE SAME DEVELOPER
KURATOV
The module locates images on a website and replaces them with AI-generated alternatives. This solution is suitable for handling copyright claims or removing third-party photographs left over from a previous site version. Image search covers information blocks, including element preview and detail images, images embedded in text content, as well as file-type properties and HTML attributes.
The 'Vacancies' module is designed for publishing and managing a company's open positions within a marketplace platform. It provides functionality for displaying current job listings, filtering by region, specialization, and experience level, and allows candidates to submit resumes or apply for specific roles.
The module allows adding an Observer to a task by mentioning an employee in the task chat. This feature is available only in the updated Bitrix24 interface version.
MORE FOR YOUR WEBSITE
The SMSBiz module is designed for sending SMS notifications in online stores and corporate portals built on the 1C-Bitrix platform. Installation and use do not require programming skills and take only a few minutes. The solution is based on the SMSInt service, which has been operating in the market for over 15 years.
The module allows you to quickly add a New Year atmosphere to your website. The package includes falling snow effects and interactive Christmas ornaments positioned at the top of the page.
iTrack Document Registry provides a centralized solution for managing all documents generated within CRM entities: leads, deals, contacts, companies, and quotes. The tool also supports creating document registries from files stored in Bitrix24.Disk.
BEFORE YOU ORDER