How to Build a Secure Order Form with Login and File Upload Using Apps Script | D3

An order form that only opens for verified customers. Email verification gates the form, every submission gets its own auto-generated order ID, and supporting photos upload to Google Drive alongside the record in Sheets.

Why the login matters

A public order form collects noise — test submissions, duplicates, and orders you cannot trace back to anyone. Putting email verification in front of it means every order in the sheet belongs to a real, reachable person. The auto-generated order ID then gives both sides a reference to quote when they talk about it.

Photos where the order needs them

The form takes image uploads for IMEI numbers and invoices — the case it was built for — but the upload field works for any supporting document an order needs. Images go to Google Drive and the sheet row links to them, so the paperwork and the order stay together rather than sitting in someone's inbox.

Built to feel finished

The interface is Bootstrap 5 with SweetAlert2 handling confirmations and errors, so a customer gets a clear response rather than a silent page. Validation runs before anything is written, and the layout works on a phone — which is where most customers will actually fill it in.

Who it suits

Mobile and electronics shops taking repair or trade-in orders, any business collecting orders with supporting documents, and developers who want a working example of authentication plus file upload in one Apps Script build.

Setup

Copy the sheet, deploy the script, share the link with customers. Google Sheets holds the orders and Drive holds the images. The video covers the whole build, and support is free if you get stuck.