alesas

Sobi Forms is a lightweight contact form plugin built for speed and simplicity. Create multiple forms, embed them anywhere with a shortcode or Gutenberg block, and keep your front-end lean.
Learn more on the official site: <a href="https://sobiforms.com" rel="nofollow ugc">sobiforms.com</a> — features, FAQ, and the <a href="https://sobiforms.com/roadmap/" rel="nofollow ugc">public roadmap</a>.
Performance-first front-end
<ul>
<li>Vanilla JavaScript on the front-end</li>
<li>~3.7 KB CSS + JS combined (gzipped transfer; ~13.3 KB unminified source on form pages)</li>
<li>Assets enqueue only when a form is rendered on the page – zero impact on other pages</li>
<li>Script loaded in the footer with <code>defer</code> strategy (WordPress 6.3+)</li>
<li>No global front-end CSS frameworks</li>
</ul>
Form builder (admin only)
<ul>
<li>Redesigned editor for more comfort — form canvas on the left, settings sidebar on the right; save without a full page reload</li>
<li>Lucide icons in the admin builder and submissions inbox (modern, consistent UI)</li>
<li>Document-first drag-and-drop editor (React via WordPress <code>wp-element</code>, loaded only on the form edit screen)</li>
<li>Field types: text, email, link (URL), textarea, phone, number, select, multiple choice (radio tiles), multi-option checkbox, file upload; layout blocks: title (section heading), paragraph (instructions)</li>
<li>URL prefill: optional per-field URL parameter to pre-populate scalar fields from query strings (client-side; cache-friendly)</li>
<li>Hidden fields: compact sidebar table to pass invisible data (URL params and/or static defaults); invisible on the front; always submitted; visible in inbox</li>
<li>File upload: one file per field; admin picks allowed types by category (Application, Image, Text) or individual extensions; private storage under <code>uploads/sobiforms/</code>; download from the Submissions inbox (admin only). Save to database is required when a form includes a file field</li>
<li>Field settings: number min/max; text min/max characters; show/hide label; textarea resize and max length; file max size (default 5 MB, capped by server)</li>
<li>Radio and multi-checkbox options edited inline in the builder (add option, remove on hover); dropdown options in the field menu</li>
<li>Multiple recipient emails per form</li>
<li>After submit: inline success message or redirect to a published page</li>
<li>Availability: pause a form, auto-close at a date/time, or after a set number of submissions, with a visitor message when closed</li>
</ul>
Embedding
<ul>
<li>Shortcode: <code>[sobiforms id="3"]</code> or <code>[sobiforms slug="contact"]</code> (ID or slug required; slug is fixed after creation)</li>
<li>Gutenberg block: Sobi Forms Contact with form picker</li>
<li>Works with any page builder that supports shortcodes or blocks</li>
</ul>
Submissions
<ul>
<li>Email notifications via <code>wp_mail()</code> (HTML)</li>
<li>Optional visitor confirmation email — simple thank-you receipt to the submitter (per form, Notifications sidebar)</li>
<li>Per-form delivery — email notifications and/or database storage (new forms default to inbox storage)</li>
<li>Inbox with read/unread, starred, spam queue, admin notes, search and filters; split list + detail layout with resizable columns; All / Unread / Starred view tabs and per-form filter in the list header</li>
<li>Submission source page — frozen page title and pathname at submit time in the detail sidebar (no query string; use hidden fields for UTM/campaign params)</li>
<li>Dashboard widget on the WordPress admin home — recent unread submissions at a glance</li>
<li>Optional Akismet spam filtering (when the Akismet plugin is active)</li>
<li>Honeypot, nonce verification, rate limiting (5 submissions/hour per hashed IP)</li>
</ul>
Security
<ul>
<li>Nonce on every submission</li>
<li>Honeypot field</li>
<li>Server-side field validation against a strict JSON schema</li>
<li>Capability checks and nonces on all admin actions</li>
<li>Optional Akismet integration — spam submissions quarantined when the Akismet plugin is active</li>
<li>File uploads — server-side MIME validation; upload directory hardened on Apache (direct HTTP access denied); admin-only download with path verification</li>
</ul>
<h3>Privacy Policy</h3>
Sobi Forms processes data submitted through your forms. Per form you choose how submissions are delivered:
<ul>
<li>Email notifications – when enabled and recipient addresses are set, field values are sent via <code>wp_mail()</code>.</li>
<li>Visitor confirmation – when Visitor email confirmation is enabled, the submitter may receive a simple thank-you at the address from the selected email field (no submitted field values in that email).</li>
<li>Database storage – when Save to database is enabled (default for new forms in the builder), submissions are saved in custom tables on your site (<code>wp_sobiforms_submissions</code>, <code>wp_sobiforms_forms</code>). Each form has its own retention setting (auto-delete after N days). You can use inbox-only delivery with no email.</li>
<li>Hashed IP – when storage is enabled, a one-way SHA-256 hash of the visitor IP is stored with each submission for abuse prevention. Raw IP addresses are not stored.</li>
<li>Rate limiting – a transient keyed by hashed IP limits submissions to 5 per hour. Transients expire automatically.</li>
<li>Admin notes – internal notes on submissions are stored in your database and never shown on the front-end or included in emails.</li>
<li>No tracking – Sobi Forms does not connect to third-party analytics or advertising when processing form submissions.</li>
<li>Optional Akismet – if you enable Akismet spam filtering and the Akismet plugin is active, submission content may be sent to Akismet’s service for spam checks.</li>
<li>No data sent to the plugin author – form submissions stay on your server and mail server. The Feedback settings tab links to the WordPress.org support forum and <a href="https://sobiforms.com/roadmap/" rel="nofollow ugc">sobiforms.com/roadmap</a> only if you choose to open them.</li>
</ul>
Site owners are responsible for their privacy policy and lawful basis for collecting visitor data.
<h3>Licenses for Third-Party Resources</h3>
This plugin bundled resources covered by their own respective licenses: 
* Lucide Icons – https://lucide.dev 
 License: ISC (https://lucide.dev/license) 
 Copyright (c) Lucide Contributors

Sobi Forms

Lightweight form builder with inbox, shortcode, Gutenberg block, and vanilla AJAX.

Brandon Fowler

Checkout Fields and File Upload for WooCommerce allows you to easily add custom fields to the WooCommerce checkout.
<h4>Product-Specific Fields</h4>
These fields can be configured only to appear when specific items or categories of items are in the cart or to appear for all items. When enabled, fields are added to the to the WooCommerce checkout field above the order notes field.
<h4>Multiple Input Types</h4>
You can add custom input fields of a multitude of different types include text, multiline, date, password, number, file, and more!
<h4>Secure File Uploads</h4>
Files are uploaded to a secure directory and are given a randomly generated name to prevent unauthorized access.
<h3>Contribute</h3>
Check out <a href="https://github.com/BrandonXLF/fields-and-file-upload" rel="nofollow ugc">the GitHub repository</a> to learn more about how you can contribute to the plugin’s development.

Checkout Fields and File Upload for WooCommerce

Easily add general or item-specific detail inputs and file uploads to the WooCommerce checkout page's additional information section.

Sobi Forms vs Checkout Fields and File Upload for WooCommerce