gv-contact-form-pro

GV CONTACT FORM PRO

Secure & Modern AJAX Forms for WordPress

Visual builder, secure CPT storage, multi-layer spam defense (Honeypot, reCAPTCHA v3, Rate Limit).
GDPR consent, CSV export, and performance optimized.

Why this plugin

Combines a user-friendly visual builder with robust security features. Stores submissions safely, fights spam effectively, and respects user privacy, all while prioritizing site performance.

Visual Form Builder

Drag, drop, and configure fields (Text, Email, Textarea), set placeholders, and mark required fields easily.

Secure CPT Storage

Submissions stored as private 'gv_message' post types, keeping data within WordPress securely.

Multi-Layer Spam Defense

Combines Honeypot, reCAPTCHA v3 (server-verified), and IP/UA rate limits.

Admin Features

Optional GDPR consent checkbox, auto-reply emails, and easy CSV export.

How it works

1. User Submits

An AJAX request is sent with a nonce. User interaction (like a field focus) lazy-loads the reCAPTCHA script to protect page speed.

2. Server-Side Verification

The server validates the Nonce, Honeypot field, GDPR consent, Rate Limit, and reCAPTCHA v3 score/action.

3. If Valid

The submission is securely saved as a private Custom Post Type. An admin email and optional auto-reply are sent.

4. JSON Response

A clean success or error message is returned via JSON to the form, allowing for a seamless UI update without a page reload.

Install & Setup

1. Install

  • Upload Gv-Forms-booking.zip via Plugins → Add New, or extract to wp-content/plugins/.
  • Activate the plugin. You'll be redirected to the builder.

2. Build Form

  • Go to GV Forms (main menu) → Builder.
  • Add, edit, reorder fields. Configure labels, slugs, types, required status, and placeholders.
  • Save Fields.

3. Configure & Deploy

  • Go to Settings → GV Contact (or GV Forms → Settings).
  • Set Admin Email, Rate Limit, reCAPTCHA keys, GDPR, Auto-reply.
  • Add the shortcode gv_contact_form to any page.

Technical details

  • Submissions handled via WordPress AJAX API (admin-ajax.php).
  • Entries stored securely as private Custom Post Type (gv_message).
  • Spam checks: Honeypot field, reCAPTCHA v3 server-side validation (score >= 0.3, action contact), transient-based rate limiting per IP/UA.
  • Performance: reCAPTCHA JS lazy-loaded on user interaction, CSS loaded non-blockingly.
  • Admin Features: Visual builder (jQuery UI Sortable), settings page, CSV export with protection against formula injection.
  • Email: Uses standard wp_mail(), includes DMARC-safe From/Sender headers by default.

FAQ

Submissions are saved as private 'Messages' (Custom Post Type: `gv_message`) within your WordPress admin area, accessible via the GV Forms menu. They are not stored externally.
No, the Google reCAPTCHA v3 script is only loaded *after* the user interacts with the form (e.g., focuses on a field). This avoids impacting initial page load speed and scores.
The plugin provides a modern dark theme (`gv-forms.css`). You can override these styles with your own CSS. Label colors and an optional form title/alignment/color can be set in the builder.
From the 'Messages' admin list page, click 'Export to CSV'. This generates a UTF-8 encoded CSV file containing all submissions, including custom fields from the builder. It also includes protection against CSV/Excel formula injection.

Need Custom Form Integration?

We can integrate GV Contact Form Pro with CRMs, marketing automation, or build custom validation rules for your specific needs.

Contact us

Protected by reCAPTCHA