alesas

Sobi Forms is a lightweight contact form plugin built for speed and simplicity. Create multiple forms, embed them anywhere with a shortcode or Gutenberg block, and keep your front-end lean.
Learn more on the official site: <a href="https://sobiforms.com" rel="nofollow ugc">sobiforms.com</a> — features, FAQ, and the <a href="https://sobiforms.com/roadmap/" rel="nofollow ugc">public roadmap</a>.
Performance-first front-end
<ul>
<li>Vanilla JavaScript on the front-end</li>
<li>~3.7 KB CSS + JS combined (gzipped transfer; ~13.3 KB unminified source on form pages)</li>
<li>Assets enqueue only when a form is rendered on the page – zero impact on other pages</li>
<li>Script loaded in the footer with <code>defer</code> strategy (WordPress 6.3+)</li>
<li>No global front-end CSS frameworks</li>
</ul>
Form builder (admin only)
<ul>
<li>Redesigned editor for more comfort — form canvas on the left, settings sidebar on the right; save without a full page reload</li>
<li>Lucide icons in the admin builder and submissions inbox (modern, consistent UI)</li>
<li>Document-first drag-and-drop editor (React via WordPress <code>wp-element</code>, loaded only on the form edit screen)</li>
<li>Field types: text, email, link (URL), textarea, phone, number, select, multiple choice (radio tiles), multi-option checkbox, file upload; layout blocks: title (section heading), paragraph (instructions)</li>
<li>URL prefill: optional per-field URL parameter to pre-populate scalar fields from query strings (client-side; cache-friendly)</li>
<li>Hidden fields: compact sidebar table to pass invisible data (URL params and/or static defaults); invisible on the front; always submitted; visible in inbox</li>
<li>File upload: one file per field; admin picks allowed types by category (Application, Image, Text) or individual extensions; private storage under <code>uploads/sobiforms/</code>; download from the Submissions inbox (admin only). Save to database is required when a form includes a file field</li>
<li>Field settings: number min/max; text min/max characters; show/hide label; textarea resize and max length; file max size (default 5 MB, capped by server)</li>
<li>Radio and multi-checkbox options edited inline in the builder (add option, remove on hover); dropdown options in the field menu</li>
<li>Multiple recipient emails per form</li>
<li>After submit: inline success message or redirect to a published page</li>
<li>Availability: pause a form, auto-close at a date/time, or after a set number of submissions, with a visitor message when closed</li>
</ul>
Embedding
<ul>
<li>Shortcode: <code>[sobiforms id="3"]</code> or <code>[sobiforms slug="contact"]</code> (ID or slug required; slug is fixed after creation)</li>
<li>Gutenberg block: Sobi Forms Contact with form picker</li>
<li>Works with any page builder that supports shortcodes or blocks</li>
</ul>
Submissions
<ul>
<li>Email notifications via <code>wp_mail()</code> (HTML)</li>
<li>Optional visitor confirmation email — simple thank-you receipt to the submitter (per form, Notifications sidebar)</li>
<li>Per-form delivery — email notifications and/or database storage (new forms default to inbox storage)</li>
<li>Inbox with read/unread, starred, spam queue, admin notes, search and filters; split list + detail layout with resizable columns; All / Unread / Starred view tabs and per-form filter in the list header</li>
<li>Submission source page — frozen page title and pathname at submit time in the detail sidebar (no query string; use hidden fields for UTM/campaign params)</li>
<li>Dashboard widget on the WordPress admin home — recent unread submissions at a glance</li>
<li>Optional Akismet spam filtering (when the Akismet plugin is active)</li>
<li>Honeypot, nonce verification, rate limiting (5 submissions/hour per hashed IP)</li>
</ul>
Security
<ul>
<li>Nonce on every submission</li>
<li>Honeypot field</li>
<li>Server-side field validation against a strict JSON schema</li>
<li>Capability checks and nonces on all admin actions</li>
<li>Optional Akismet integration — spam submissions quarantined when the Akismet plugin is active</li>
<li>File uploads — server-side MIME validation; upload directory hardened on Apache (direct HTTP access denied); admin-only download with path verification</li>
</ul>
<h3>Privacy Policy</h3>
Sobi Forms processes data submitted through your forms. Per form you choose how submissions are delivered:
<ul>
<li>Email notifications – when enabled and recipient addresses are set, field values are sent via <code>wp_mail()</code>.</li>
<li>Visitor confirmation – when Visitor email confirmation is enabled, the submitter may receive a simple thank-you at the address from the selected email field (no submitted field values in that email).</li>
<li>Database storage – when Save to database is enabled (default for new forms in the builder), submissions are saved in custom tables on your site (<code>wp_sobiforms_submissions</code>, <code>wp_sobiforms_forms</code>). Each form has its own retention setting (auto-delete after N days). You can use inbox-only delivery with no email.</li>
<li>Hashed IP – when storage is enabled, a one-way SHA-256 hash of the visitor IP is stored with each submission for abuse prevention. Raw IP addresses are not stored.</li>
<li>Rate limiting – a transient keyed by hashed IP limits submissions to 5 per hour. Transients expire automatically.</li>
<li>Admin notes – internal notes on submissions are stored in your database and never shown on the front-end or included in emails.</li>
<li>No tracking – Sobi Forms does not connect to third-party analytics or advertising when processing form submissions.</li>
<li>Optional Akismet – if you enable Akismet spam filtering and the Akismet plugin is active, submission content may be sent to Akismet’s service for spam checks.</li>
<li>No data sent to the plugin author – form submissions stay on your server and mail server. The Feedback settings tab links to the WordPress.org support forum and <a href="https://sobiforms.com/roadmap/" rel="nofollow ugc">sobiforms.com/roadmap</a> only if you choose to open them.</li>
</ul>
Site owners are responsible for their privacy policy and lawful basis for collecting visitor data.
<h3>Licenses for Third-Party Resources</h3>
This plugin bundled resources covered by their own respective licenses: 
* Lucide Icons – https://lucide.dev 
 License: ISC (https://lucide.dev/license) 
 Copyright (c) Lucide Contributors

Sobi Forms

Lightweight form builder with inbox, shortcode, Gutenberg block, and vanilla AJAX.

Lucian Radu

Filevue

A private WordPress client portal, auto-installed on activation. Secure logins, folders, file sharing, staff access, activity tracking, and branding.

Sobi Forms vs Filevue