Advanced form processing system with REST API support, Telegram notifications, and Google Sheets integration.

<p>MksDdn Forms Handler is a powerful and flexible form processing plugin that allows you to create and manage forms with multiple delivery methods. Perfect for websites that need reliable form handling with modern integrations.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Multiple Delivery Methods</strong>: Send form submissions via email, Telegram, Google Sheets, or store in WordPress admin</li>
<li><strong>REST API Support</strong>: Submit forms via AJAX or REST API endpoints</li>
<li><strong>Telegram Integration</strong>: Instant notifications to Telegram channels</li>
<li><strong>Google Sheets Integration</strong>: Automatically save submissions to Google Sheets</li>
<li><strong>Custom Post Types</strong>: Dedicated forms and submissions management</li>
<li><strong>Security First</strong>: Built-in validation, sanitization, and security measures</li>
<li><strong>Developer Friendly</strong>: Clean code structure with proper namespacing</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Contact forms with multiple delivery options</li>
<li>Lead generation forms with instant notifications</li>
<li>Data collection forms with Google Sheets backup</li>
<li>Custom forms with REST API integration</li>
</ul>
<h4>Technical Features</h4>
<ul>
<li>WordPress 5.0+ compatible (tested up to 6.9)</li>
<li>PHP 8.0+ required</li>
<li>GPL v2+ licensed</li>
<li>Clean, maintainable code</li>
<li>Proper error handling</li>
<li>Comprehensive logging</li>
</ul>
<h3>For Developers</h3>
<h4>Architecture</h4>
<p><strong>Component-based structure</strong> following SOLID principles with clear separation of concerns:</p>
<p><strong>Core Components (includes/)</strong><br />
* <code>PostTypes</code> – custom post types registration (<code>mksddn_fh_forms</code>, <code>mksddn_fh_submits</code>)<br />
* <code>MetaBoxes</code> – form settings and submission data management<br />
* <code>FormsHandler</code> – main processing logic with REST API support<br />
* <code>Shortcodes</code> – form rendering with AJAX functionality<br />
* <code>AdminColumns</code> – admin interface customization<br />
* <code>ExportHandler</code> – CSV export with filtering<br />
* <code>Security</code> – rate limiting and security checks<br />
* <code>Utilities</code> – helper functions and form creation utilities<br />
* <code>GoogleSheetsAdmin</code> – Google Sheets settings page and OAuth<br />
* <code>Assets</code> – asset registration and conditional enqueuing<br />
* <code>Template Functions</code> – global functions for PHP template integration</p>
<p><strong>Handlers (handlers/)</strong><br />
* <code>TelegramHandler</code> – Telegram Bot API integration<br />
* <code>GoogleSheetsHandler</code> – Google Sheets API integration</p>
<p><strong>Assets (assets/)</strong><br />
* <code>css/</code> – Admin and frontend styles<br />
* <code>js/</code> – Admin and form scripts<br />
* <code>images/</code> – Plugin images</p>
<h4>Technology Stack</h4>
<ul>
<li>WordPress 5.0+ – core platform</li>
<li>PHP 8.0+ – server-side logic</li>
<li>jQuery – client-side form handling</li>
<li>REST API – form submission API</li>
<li>Google Sheets API – spreadsheet integration</li>
<li>Telegram Bot API – notifications</li>
</ul>
<h4>File Structure</h4>
<pre><code>mksddn-forms-handler/
├── mksddn-forms-handler.php     # Main plugin file
├── includes/                     # Core components
│   ├── class-post-types.php
│   ├── class-meta-boxes.php
│   ├── class-forms-handler.php
│   ├── class-shortcodes.php
│   ├── class-admin-columns.php
│   ├── class-export-handler.php
│   ├── class-security.php
│   ├── class-utilities.php
│   ├── class-google-sheets-admin.php
│   ├── class-assets.php
│   └── template-functions.php
├── handlers/                     # External service handlers
│   ├── class-telegram-handler.php
│   └── class-google-sheets-handler.php
├── templates/                    # Template files
│   ├── form-settings-meta-box.php
│   └── custom-form-examples.php
├── assets/                       # Static resources
│   ├── css/
│   ├── js/
│   └── images/
├── languages/                    # Translations
└── uninstall.php                # Cleanup script
</code></pre>
<h4>Integration Methods</h4>
<p><strong>1. Shortcode (Standard)</strong></p>
<pre><code>[mksddn_fh_form slug="contact-form"]
</code></pre>
<p>Plugin automatically generates HTML form based on configuration.</p>
<p><strong>2. PHP Templates (Custom Forms)</strong><br />
Integrate pre-built forms in theme templates:</p>
<pre><code><form method="post" action="<?php echo mksddn_fh_get_form_action(); ?>">
    <?php mksddn_fh_form_fields('contact-form'); ?>
    
    <input type="text" name="name" required>
    <input type="email" name="email" required>
    <button type="submit">Send</button>
</form>
</code></pre>
<p><strong>Available Functions:</strong><br />
* <code>mksddn_fh_get_form_action()</code> – get form action URL<br />
* <code>mksddn_fh_form_fields($slug)</code> – output hidden fields (nonce, form_id, honeypot)<br />
* <code>mksddn_fh_get_form_config($slug)</code> – get form configuration<br />
* <code>mksddn_fh_get_rest_endpoint($slug)</code> – get REST API endpoint for AJAX<br />
* <code>mksddn_fh_form_has_files($slug)</code> – check for file fields<br />
* <code>mksddn_fh_enqueue_form_script()</code> – enqueue AJAX script</p>
<p><strong>Accept Any Fields (Advanced):</strong><br />
For custom forms where you control field names in templates, enable “Accept any fields from frontend” in form settings to skip field validation. This allows submitting ANY field names without defining them in Fields Configuration. All fields are still sanitized but type validation is skipped.</p>
<p>See <code>/templates/custom-form-examples.php</code> for detailed examples.</p>
<p><strong>3. REST API (AJAX)</strong><br />
Submit forms via REST API without page reload:</p>
<pre><code>fetch('<?php echo mksddn_fh_get_rest_endpoint("contact-form"); ?>', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify(formData)
});
</code></pre>
<h4>Development Standards</h4>
<p><strong>Coding</strong><br />
* WordPress Coding Standards compliance<br />
* SOLID principles<br />
* DRY (Don’t Repeat Yourself)<br />
* KISS (Keep It Simple)</p>
<p><strong>Security</strong><br />
* Input validation for all data<br />
* Output sanitization<br />
* Nonce verification (CSRF protection)<br />
* Capability checks<br />
* Rate limiting (1 request per 10 seconds per IP per form)</p>
<p><strong>Performance</strong><br />
* Minimal database queries<br />
* Data caching<br />
* Lazy loading of resources<br />
* Conditional script enqueuing</p>
<p><strong>Compatibility</strong><br />
* WordPress 5.0+ minimum<br />
* PHP 8.0+ minimum<br />
* Multisite support<br />
* RTL support<br />
* Accessibility standards (WCAG)</p>
<h4>WordPress Hooks & Filters</h4>
<p><strong>Filters:</strong></p>
<pre><code>mksddn_fh_allowed_fields - Modify allowed field names for a form

add_filter('mksddn_fh_allowed_fields', function($allowed_fields, $form_id, $form_slug) {
    // Allow all fields for specific form
    if ($form_slug === 'my-custom-form') {
        return ['*'];
    }
    // Add specific fields
    return array_merge($allowed_fields, ['custom_field_1', 'custom_field_2']);
}, 10, 3);

mksddn_fh_allowed_redirect_hosts - Whitelist external domains for redirect URLs

add_filter('mksddn_fh_allowed_redirect_hosts', function($hosts) {
    // Allow specific external domains for redirects
    return array_merge($hosts, ['example.com', 'trusted-partner.com']);
});
</code></pre>
<p><strong>Actions:</strong></p>
<pre><code>mksddn_forms_handler_log_security - Fired when unauthorized fields are detected
mksddn_forms_handler_log_submission - Fired when form submission is processed<h3>REST API</h3>
</code></pre>
<p>Namespace: <code>mksddn-forms-handler/v1</code></p>
<h4>List Forms</h4>
<ul>
<li><strong>Method</strong>: GET</li>
<li><strong>Path</strong>: <code>/wp-json/mksddn-forms-handler/v1/forms</code></li>
<li><strong>Query Parameters</strong>:
<ul>
<li><code>per_page</code> (1–100, default: 10)</li>
<li><code>page</code> (>=1, default: 1)</li>
<li><code>search</code> (string, optional)</li>
</ul>
</li>
<li><strong>Response Headers</strong>: <code>X-WP-Total</code>, <code>X-WP-TotalPages</code></li>
</ul>
<h4>Get Single Form</h4>
<ul>
<li><strong>Method</strong>: GET</li>
<li><strong>Path</strong>: <code>/wp-json/mksddn-forms-handler/v1/forms/{slug}</code></li>
<li><strong>Response</strong>: Includes <code>id</code>, <code>slug</code>, <code>title</code>, <code>submit_url</code>, <code>fields</code> (sanitized config)</li>
</ul>
<h4>Submit Form</h4>
<ul>
<li><strong>Method</strong>: POST</li>
<li><strong>Path</strong>: <code>/wp-json/mksddn-forms-handler/v1/forms/{slug}/submit</code></li>
<li><strong>Content Types</strong>: JSON or multipart/form-data</li>
<li><strong>Body (JSON)</strong>: Key/value pairs according to field configuration. The <code>mksddn_fh_hp</code> honeypot field may be present and must be empty (spam protection).</li>
<li><strong>Body (Multipart)</strong>: Fields and file uploads supported. For multiple files, use <code>name[]</code>.</li>
</ul>
<h4>Validation & Limits</h4>
<ul>
<li>Only configured fields accepted; unauthorized fields return <code>unauthorized_fields</code> error</li>
<li>Required fields, email, URL, number (min/max/step), tel (pattern), date, time, datetime-local are validated</li>
<li>Maximum 50 fields; total payload size ≤ 100 KB</li>
<li>Rate limiting: 1 request per 10 seconds per IP per form</li>
</ul>
<h4>Examples</h4>
<p><strong>List forms:</strong></p>
<pre><code>curl -s 'https://example.com/wp-json/mksddn-forms-handler/v1/forms'
</code></pre>
<p><strong>Get single form:</strong></p>
<pre><code>curl -s 'https://example.com/wp-json/mksddn-forms-handler/v1/forms/contact'
</code></pre>
<p><strong>Submit form (JSON):</strong></p>
<pre><code>curl -s -X POST \
  -H 'Content-Type: application/json' \
  -d '{"name":"John","email":"john@example.com","message":"Hi","mksddn_fh_hp":""}' \
  'https://example.com/wp-json/mksddn-forms-handler/v1/forms/contact/submit'
</code></pre>
<p><strong>Submit form with files (multipart):</strong></p>
<pre><code>curl -s -X POST \
  -F 'name=John' \
  -F 'email=john@example.com' \
  -F 'attachments[]=@/path/to/file1.pdf' \
  -F 'attachments[]=@/path/to/file2.png' \
  'https://example.com/wp-json/mksddn-forms-handler/v1/forms/contact/submit'<h3>Supported Field Types</h3>
</code></pre>
<p>Fields are configured as JSON in the form settings. Supported types:</p>
<ul>
<li><strong>Basic</strong>: text, email, password</li>
<li><strong>Input</strong>: tel, url, number, date, time, datetime-local</li>
<li><strong>Text</strong>: textarea</li>
<li><strong>Choice</strong>: checkbox, select (supports multiple), radio</li>
<li><strong>File</strong>: file uploads (form and REST multipart)</li>
<li><strong>Array</strong>: array_of_objects – array of objects with nested field validation</li>
</ul>
<h4>Field Configuration Notes</h4>
<ul>
<li><code>name</code> – field name (required, used as form input name)</li>
<li><code>label</code> – field label displayed in forms and admin (optional, falls back to <code>name</code>)</li>
<li><code>notification_label</code> – custom label for Telegram/email notifications (optional, priority: notification_label <span aria-hidden="true" class="wp-exclude-emoji">→</span> label <span aria-hidden="true" class="wp-exclude-emoji">→</span> name)</li>
<li><code>type</code> – field type (required)</li>
<li><code>required</code> – whether field is required (boolean, default: false)</li>
<li><code>options</code> can be an array of strings or objects <code>{ "value": "...", "label": "..." }</code></li>
<li>For <code>select</code> with multiple choice, set <code>multiple: true</code> (shortcode renders <code>name[]</code>)</li>
<li>For <code>number</code>, optional attributes: <code>min</code>, <code>max</code>, <code>step</code></li>
<li>For <code>tel</code>, optional <code>pattern</code> (default server validation uses <code>^\+?\d{7,15}$</code>)</li>
<li>For <code>date/time/datetime-local</code>, server validates formats: <code>YYYY-MM-DD</code>, <code>HH:MM</code>, <code>YYYY-MM-DDTHH:MM</code></li>
<li>For REST submissions, send arrays for multiple selects</li>
<li>Pattern validation: use standard regex syntax (backslashes are preserved, invalid patterns are rejected)</li>
</ul>
<h4>File Field Options</h4>
<ul>
<li><code>allowed_extensions</code>: Array of extensions, e.g. <code>["pdf","png","jpg"]</code></li>
<li><code>max_size_mb</code>: Maximum size per file (default: 10)</li>
<li><code>max_files</code>: Maximum files per field (default: 5)</li>
<li><code>multiple</code>: Allow multiple files</li>
</ul>
<h4>Example JSON Configuration</h4>
<pre><code>[
  {"name":"name","label":"Name","type":"text","required":true,"placeholder":"Your name"},
  {"name":"email","label":"Email","notification_label":"Email Address","type":"email","required":true},
  {"name":"phone","label":"Phone","type":"tel","pattern":"^\\\\+?\\\\d{7,15}$"},
  {"name":"website","label":"Website","type":"url"},
  {"name":"age","label":"Age","type":"number","min":1,"max":120,"step":1},
  {"name":"birth","label":"Birth date","type":"date"},
  {"name":"message","label":"Message","type":"textarea","required":true},
  {"name":"agree","label":"I agree to Terms","type":"checkbox","required":true},
  {
    "name":"services",
    "label":"Choose services",
    "type":"select",
    "multiple":true,
    "options":["seo","smm","ads"]
  },
  {
    "name":"attachments",
    "label":"Attach files",
    "type":"file",
    "multiple":true,
    "allowed_extensions":["pdf","png","jpg"],
    "max_size_mb":10,
    "max_files":3
  },
  {
    "name":"products",
    "label":"Products",
    "type":"array_of_objects",
    "required":true,
    "fields":[
      {"name":"name","label":"Product Name","type":"text","required":true},
      {"name":"size","label":"Size","type":"text","required":true},
      {"name":"color","label":"Color","type":"text","required":true},
      {"name":"quantity","label":"Quantity","type":"number","required":true,"min":1},
      {"name":"price","label":"Price","type":"number","required":true,"min":0}
    ]
  }
]
</code></pre>
<h4>Pattern Validation Examples</h4>
<p>Common regex patterns for validation (use in JSON with double backslashes):</p>
<ul>
<li>Phone (international): <code>"pattern": "^\\+?\\d{7,15}$"</code></li>
<li>Phone (US): <code>"pattern": "^\$\\d{3}\$\\s?\\d{3}-\\d{4}$"</code></li>
<li>Postal code (US): <code>"pattern": "^\\d{5}(-\\d{4})?$"</code></li>
<li>Postal code (RU): <code>"pattern": "^\\d{6}$"</code></li>
<li>Only letters: <code>"pattern": "^[a-zA-Z]+$"</code></li>
<li>Alphanumeric: <code>"pattern": "^[a-zA-Z0-9]+$"</code></li>
<li>URL slug: <code>"pattern": "^[a-z0-9-]+$"</code></li>
</ul>
<p><strong>Important notes:</strong><br />
* In JSON, backslashes must be doubled (e.g., <code>\\d</code> instead of <code>\d</code>, <code>\\+</code> instead of <code>\+</code>)<br />
* HTML tags in patterns will be automatically removed for security<br />
* Invalid regex patterns will be rejected silently (check debug.log if WP_DEBUG is enabled)</p>
<h4>Array of Objects Field Type</h4>
<p>The <code>array_of_objects</code> type allows you to define arrays with nested field validation. Each item in the array is validated according to the nested <code>fields</code> configuration.</p>
<p><strong>Configuration:</strong><br />
* <code>name</code>: Field name (required)<br />
* <code>label</code>: Field label (required)<br />
* <code>notification_label</code>: Custom label for notifications (optional, priority: notification_label <span aria-hidden="true" class="wp-exclude-emoji">→</span> label <span aria-hidden="true" class="wp-exclude-emoji">→</span> name)<br />
* <code>type</code>: Must be <code>"array_of_objects"</code> (required)<br />
* <code>required</code>: Whether the array is required (default: false)<br />
* <code>fields</code>: Array of field configurations for each object in the array (required)</p>
<p><strong>Nested fields support all standard field types</strong> (text, email, tel, url, number, textarea, etc.) with full validation. Nested fields also support <code>notification_label</code> for custom labels in Telegram/email notifications.</p>
<p><strong>Example REST API submission:</strong></p>
<pre><code>{
  "email": "user@example.com",
  "phone": "+1234567890",
  "products": [
    {
      "name": "T-Shirt",
      "size": "M",
      "color": "Red",
      "quantity": 2,
      "price": 1500
    },
    {
      "name": "Jeans",
      "size": "L",
      "color": "Blue",
      "quantity": 1,
      "price": 3000
    }
  ]
}<h3>External Services</h3>
</code></pre>
<p>This plugin can connect to external services when explicitly enabled in a form’s settings:</p>
<h4>Google OAuth2 and Google Sheets API</h4>
<ul>
<li><strong>Purpose</strong>: Authenticate and append rows to a spreadsheet</li>
<li><strong>When</strong>: Only if “Send to Google Sheets” is enabled for a form and valid credentials are provided</li>
<li><strong>Data sent</strong>: Form fields configured for the form, form title, timestamp</li>
<li><strong>Endpoints used</strong>: <code>https://oauth2.googleapis.com/token</code>, <code>https://sheets.googleapis.com/v4/spreadsheets/...</code></li>
<li><strong>Terms</strong>: https://policies.google.com/terms</li>
<li><strong>Privacy</strong>: https://policies.google.com/privacy</li>
</ul>
<h4>Telegram Bot API</h4>
<ul>
<li><strong>Purpose</strong>: Send a message with submission content to specified chat(s)</li>
<li><strong>When</strong>: Only if “Send to Telegram” is enabled for a form and bot token + chat IDs are configured</li>
<li><strong>Data sent</strong>: Form fields configured for the form, form title</li>
<li><strong>Endpoint used</strong>: <code>https://api.telegram.org/bot<token>/sendMessage</code></li>
<li><strong>Terms/Privacy</strong>: https://telegram.org/privacy</li>
</ul>
<h4>Privacy Notes</h4>
<ul>
<li>No IP address or user agent is transmitted to external services; only form field values are sent</li>
<li>External delivery is opt-in per form and disabled by default</li>
</ul>

Alternatives to MksDdn Forms Handler

Top alternatives