I have noticed that Google spreadsheet form's have URLs in the form of
http://spreadsheets.google.com/viewform?formkey=.... I don't see anything that relates to the Google account in the URL. There also isn't any information about the Google account that owns the form on the form it self.
This seems like a huge security hole, since anyone can spoof an existing form and pretend to be someone else.
Is there any way to know which Google account is going to get my submitted form data?
Maybe it's embedded on the page somehow? Maybe it can be derived from the URL?