Fast Secure Contact Form (WP)

The Fast Secure Contact Form WordPress plugin provides an extremely easy way of creating custom contact forms, without having to mess around with a site's PHP's code and WordPress page templates.

Once installed this plugin adds a special page in the WordPress backend where administrators can configure a wide range of form-related features, create multiple contact forms, and preview the forms before saving them.

Using the provided interface, any type of form fields can be added to the form, or removed when no longer needed.

Created forms can be embedded on the site's frontend using a shortcode in the form of [si-contact-form form='ID'].

Installation:

Unpack and upload it to the /wp-content/plugins/ directory.

Activate the plugin through the 'Plugins' menu in WordPress.

Fast Secure Contact Form is also available as a stand-alone PHP script.

What is new in this release:

• Fixed possible XSS vulnerability with add_query_arg(), remove_query_arg() and esc_url() usage.
• Improved timezone compliance with WP standards.

What is new in version 4.0.37:

• Fixed possible XSS vulnerability with add_query_arg(), remove_query_arg() and esc_url() usage.
• Improved timezone compliance with WP standards.

What is new in version 4.0.36:

• Fixed possible XSS vulnerability with add_query_arg(), remove_query_arg() and esc_url() usage.
• Improved timezone compliance with WP standards.

What is new in version 4.0.34:

• Fixed fscf_init_languages priority
• Fixed a print array was left active during silent send
• Updated Turkish language file

What is new in version 4.0.33:

• Fixed fscf_init_languages priority
• Fixed a print array was left active during silent send
• Updated Turkish language file

What is new in version 4.0.30:

• 100% Spanish translation.

What is new in version 4.0.29:

• Fixed the validate email function is updated for new generic top-level domains (gTLDs) released in 2014 and beyond. Allows up to 12 characters like .training, .photography, .company, etc.
• Fixed so honeypot field slug will never conflict with custom post types.
• Added new feature for Default field properties: For the Default setting of a date field type, you can enter any date in the configured format. Or to show today's date as default, just put the word today in brackets. example: [today].

What is new in version 4.0.25:

• Fixed 'Add New Field' button not working on German translation.

What is new in version 4.0.22:

• Fixed support links.

What is new in version 4.0.21:

• Better explanation of email settings.

What is new in version 4.0.19:

• Bug fix:
• The 'follow' feature was not working correctly if fields were re-sorted.
• New feature:
• When Name field is set to "First Name, Last Name" you can use the check box "inline" to get the last name to follow the first name on the same line.

What is new in version 4.0.17:

• Added filter hook for modifying redirect URL.

What is new in version 4.0.15:

• Bug fix:
• The attributes setting was not working on name, email, subject, fields.
• Schedule a meeting button could show when not activated.

What is new in version 4.0.8:

• Bug fix:
• A couple problems with importing settings from 3.xx version.
• None of the language translations were working.
• There were some UI image 404 errors from includes/images.
• vCita setting error.

What is new in version 4.0.6:

• New user interface with tabs.
• New 'Fields' tab where you can re-order the display sequence of all the fields via a drag and drop interface.
• The standard fields (name,email,subject,message) can now be manipulated and re-ordered along with the extra fields in the new 'Fields' tab.
• Forms are easier to add, remove, label, and select for edit or preview.
• Fields are easier to add, remove, and re-order.
• Easier to use field labels, tags, and field options. You no longer have to escape comas in form labels and options.
• Automatic import of settings from version 2.5.6 and all 3.xx versions.
• You can restore your backed up forms from version 2.8 and newer with 'Restore Settings' on the new 'Tools' tab.
• Updated Online Meeting Scheduler by vCita on the new 'Scheduler' tab.
• Updated 'Constant Contact' plugin integration for the new 'Newsletter' settings tab.
• PHP Sessions are no longer enabled by default allowing for best compatibility with servers, caching, themes, and other plugins. This should resolve any PHP sessions related issues some users had.
• Improved validation of time fields.
• Improved CAPTCHA images.
• More optimized HTML indents when view source.
• New setting on the Advanced tab to enable a "view / print message" button after message sent. This feature will be skipped if the "redirect after the message sends" is also enabled.
• Default CSS style for 'labels on top' is now responsive(note:your theme style has to be responsive also).
• New feature: for select, radio, checbox-miltiple, select-multiple field types: If you add options as a key==value set (use == to separate) the value will show on the form and the key will show in the email.
• New field Setting: "Hide label" check this setting if you want to hide the field label on the form.
• New field setting: "Default as placeholder" Check this setting if you want the default text to be a placeholder inside the form field. The placeholder is a short hint that is displayed in the input field before the user enters a value. Works with the following input types only: name, email, subject, message, text, textarea, url, and password.
• New tags capability for fields.
• New 'Reset Form' button to Tools tab.
• New 'Delete Form' function to Tools tab.
• New 'Reset Styles on all forms' button to the Tools tab.
• Lots of work on the Style tab.

What is new in version 3.1.9.1:

• Fixed bugs:
• Custom Label CSS was ignored for checkbox, checkbox-multiple, and radio fields.
• CSS setting 'labels on left' messed up checkbox, checkbox-multiple, and radio fields.
• CSS setting 'labels on left' messed up HTML before/after form field position.

What is new in version 3.1.9:

• Added announcement of Fast Secure Contact Form Version 4.0 Beta.

What is new in version 3.1.8.6:

• Minor bug fixes.

What is new in version 3.1.8.4:

• Added better date input validation.

What is new in version 3.1.8.3:

• Fixed allow \n for new line in textarea defaults.
• Fixed the date field did not retain the value if there is a submit error.
• Fixed so if redirect seconds are set to 0, use wp_redirect instead of reloading the page with a meta refresh.
• Some code cleanup.

What is new in version 3.1.8.2:

• Fixed some forms sometimes blanked on Submit.
• Fixed error logic for attachment permissions.
• Fixed form posting issues caused by cached pages and session timeout issues.
• Fixed sometimes missing values for select-multiple field type.
• Fixed CAPTCHA did not work on some servers.
• Fixed sometimes error in backup tool.

What is new in version 3.1.8:

• Added border formatting of HTML email where it displays user info.

What is new in version 3.1.6.1:

• Many security improvements and code cleanup.
• Autoresponder email is renamed to Confirmation email.
• Border label can now be disabled by deleting the "Border label" setting.
• Removed geekmail mail send function, you can still use WordPress or PHP.
• Email field is now type=text instead of type=email because too many themes did not style for it. Version 4.0 will have an option to select this.

What is new in version 3.1.5.7:

• Powered by link will open in new window.
• Added support for Fast Secure Contact Form Newsletter plugin addon.
• Use correct comment_type = contact-form for Akismet API call.
• Improve visual style of rating stars.

What is new in version 3.1.5.5:

• Fixed so permissions of the captcha temp folder is not changed.

What is new in version 3.1.5.4:

• Better detection of checkbox config errors.

What is new in version 3.1.5.3:

• vCita message dismiss feature.

What is new in version 3.1.5.2:

• Fixed hidden shortcode settings broken since version 3.1.5.

What is new in version 3.1.5.1:

• Removed message "You still haven't completed your Meeting Scheduler settings." on admin pages.

What is new in version 3.1.4:

• Fixed possible error: preg_match() expects parameter to be string.
• Fixed to use separate CC: email header.
• vCita improvements.

What is new in version 3.1.3.1:

• Fix vCita had some uninitialized variable errors when debugging is on.

What is new in version 3.1.1:

• Updated vCita functions and added new schedule a meeting buttons.
• Replace the use of WP_PLUGIN_URL with plugins_url() for better SSL compatibility.
• Updated Italian language (it_IT).

What is new in version 3.1:

• Add "Set a meeting" option to your contact form using vCita Meeting Scheduler. Meet users over video or phone, and collect payment for services.

What is new in version 3.0.5:

• Harden security for CAPTCHA by limiting the number of created cache files. This condition could only be realized with a script.
• HTML validation fix, added unique id for submit and reset buttons.

What is new in version 3.0.4:

• Fix default text could not be 0.
• Fix HTML validation with date field.
• Fix rows and cols extra field attributes.
• Fix javascript console error on date calendar popup.

What is new in version 3.0.3.2:

• Added missing 00 to 24 hour time select.

What is new in version 3.0.3.1:

• Tested / fixed to be compatible with WP 3.2.
• Fix for &apos entity showing for single quotes on IE7, IE8.
• Fix for CAPTCHA input field out of position on IE7 with labels left CSS setting.

What is new in version 3.0.3:

• Tested compatible with WP 3.2 Beta 2.
• "Number of available extra fields" setting is now for each form # instead of all forms.
• CAPTCHA audio feature removed.
• Misc. admin Fixes.
• Another fix for empty autoresponder field tags were showing.
• Calendar style improvements.

What is new in version 3.0.2:

• Fixed error: Undefined variable: securimage_url.
• Added id tags to submit and reset buttons.
• Updated Italian language (it_IT).

What is new in version 3.0.1:

• CAPTCHA Audio feature is disabled by Mike Challis until further notice because a proof of concept code CAPTCHA solving exploit was released - Security Advisory - SOS-11-007. CAPTCHA image is not involved.
• Security enhancements for possible low level XSS exploit in admin settings: thanks to Julio Potier.
• Fix javascript error when CAPTCHA audio is disabled.
• Fixed missing width/height attributes for CAPTCHA images.
• Fixed backslash problem on Restore Settings tool.
• Fixed empty autoresponder field tags were showing.
• Fixed various style improvements for admin error messages.
• Added a popup alert for when changing the number of forms or extra fields.
• Added setting: CSS style for CAPTCHA input field on the contact form.
• Added Norwegian Bokmal (nb_NO).

What is new in version 3.0:

• Added (extra fields) default text can be set for text or textarea.
• Added (extra fields) max length can be set for password, text or textarea.
• Added (extra fields) attributes can be set for password, text or textarea.
• Added (extra fields) validation regex can be set for password, text or textarea.
• Added (extra fields) validation regex fail message can be set for password, text or textarea.
• Added (extra fields) label or input CSS can be set individually for any extra field.
• Added (extra fields) HTML before and after can be set.
• Added (extra fields) 'email' extra field type with validation.
• Added (extra fields) 'url' extra field type with validation.
• Added (extra fields) first option of select field type can be in brackets to indicate [Please select].
• Added 'email' field pulls up proper keyboard on iphone/ipad.
• Added optional [form_label] tag for subject.
• Added time format option for 'time' extra field (select 12 or 24 hour).
• Improved extra fields admin GUI.
• Added Field labels are bold when HTML email is enabled.
• Fix - trim spaces on extra field multiple options.
• Fix - attached field allowed types separated by spaces.
• Fix - bug in restore tool that could cause data loss.
• Email validate DNS check disabled by default because some servers have big delay.

What is new in version 2.9.8.6:

• Fix HTML notes would not appear before a fieldset open.
• Fix horizontal display feature for radio and multiple checkbox after post.
• Fixed date calender on some themes by adding a high z-index to the CSS.
• Added ability to use comma in "Email To:" name. If you need to use a comma besides the one needed to separate the name and email, escape it with a back slash, like this: ,
• Added ability to specify cc and bcc in "Email To:". Example: Webmaster,user1@example.com;[cc]user2@example.com;[bcc]user3@example.com
• Added more WordPress logged in user details to the email message footer.
• Added optional "Are you sure?" form submit popup message (message can also be changed).
• Added Arabic (ar) partial translation.

What is new in version 2.9.8.3:

• Improvement: JavaScript is only loaded on pages when it is conditionally needed.
• Fixed 2 label alignment problems with some themes.
• Fixed possible javascript conflict that can break the redirect feature.
• Fixed extra fields were not accepting zero.
• More name labels can be changed.
• Added new feature: Copy Settings Tool. This tool can copy your contact form settings from one form number to any of your other forms. Use to copy just the style settings, or all the settings from one form.
• Added more shortcode optional settings see FAQ page.
• Added hidden field can accept query input. see FAQ page.
• Other fixes and enhancements.

What is new in version 2.9.8.2:

• Fix critical error "invalid argument supplied foreach () /si-contact-form.php on line 474". Sorry for the inconvenience.
• Fix "Enable data export after the message" setting would not uncheck.
• Changed default setting: If you use Contact Form 7 to DB Extension Plugin, be sure to visit the form edit page and enable this setting: "Enable data export after the message", because it is not enabled by default.

What is new in version 2.9.8:

• Added setting: "Enable to receive email as HTML instead of plain text." Enable if you want the email message sent as HTML format. HTML format is desired if you want to avoid a 70 character line wordwrap when you copy and paste the email message. Normally the email is sent in plain text wordwrapped 70 characters per line to comply with most email programs.
• Added new settings in the "Redirect" section: You can Enable posted data to be sent as a query string on the redirect URL. This can be used to send the posted data via GET query string to a another form.
• New settings for redirect: "Query string fields to ignore", "Query string fields to rename", and "Disable email sending (use only when required while you have enabled query string on the redirect URL)". See FAQ
• Added version indicator and new version reminder to settings page.
• Fixed a multiple email problem if using the same form in several posts. Anyway, it is recommended to use the form in a page or sidebar, not a post.
• Fixed bug where form number was reset to 4 after trying to increase over 99.
• Fixed so now one CAPTCHA random position always has to be a number so that a 4 letter swear word could never appear.
• Many small fixes and enhancements.
• Added Romanian (ro_RO).

What is new in version 2.9.7.1:

• Added ability to pre-fill in form fields from a URL query string. see FAQ page.
• Select Single posted data fix.

What is new in version 2.9.7:

• Added a new hook for other plugins to use (just after mail sent). This can be used to export the posted data and attachments to a database. A plugin for this is in the works, stay tuned.
• Added new Select-multiple extra field type.
• Added new feature to set the css style for Label and Field in the same row, or switch back to Label on Top see FAQ
• Added new Setting for "Form Label". You can enter a label for your form to keep track of what you are using it for.
• Fixes and improvements for better mail delivery and to reduce the emails from going to the spam folder. If you are not getting email, set the setting "E-mail From" to an email address on the same domain as your web site. This will improve mail delivery. mail problem faq.
• Added new setting: "Enable when web host requires "Mail From" strictly tied to domain email account". If your form does not send any email, then set the "E-mail From" setting to an address on the same web domain as your web site. If email still does not send, also check this setting. (ie: some users report this is required by yahoo small business web hosting) .
• Added ability to use comma in extra field labels for Checkbox, Radio, Select, or Select-multiple. If you need to use a comma besides the one needed to separate the label, escape it with a back slash, like this: ,
• Improved Akismet spam check API code.
• Fixed required option for checkbox multiple, now all field types can be required as needed.
• Fixed all fields with multiple options can have a default option: checkbox, radio, select, or select-multiple.
• Other small Fixes and improvements.
• Updated Italian (it_IT)

Requirements:

• WordPress 3.4.2 or higher
• PHP 5 or higher
• GD2 library support
• PHP register_globals and safe_mode should be set to "Off"