SentientMail Form Builder
| 开发者 | sentientmail |
|---|---|
| 更新时间 | 2026年9月10日 23:53 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
SentientMail Form Builder connects your WordPress site to SentientMail, so every newsletter signup and form submission lands in your email audience automatically, ready for journeys, campaigns, and transactional email.
Newsletter signups in two minutes
- Install and activate the plugin
- Paste your SentientMail Events API key on the Get Started screen
- Add the ready-made Newsletter Signup form to any page, as a block or a shortcode
- Contact, application, and custom forms with 23 field types (including file uploads, address, rating, consent, calculations, signature, matrix and repeatable groups)
- Save and resume, so a long form can be finished later, plus optional capture of forms people abandon
- Conditional logic: show or hide fields based on earlier answers, enforced on the server as well as in the browser
- Multi-page forms with a progress indicator and per-page validation
- Eight starter templates, so you never begin with an empty form
- Privacy controls: optional IP logging, an entry retention window, and support for WordPress export and erasure requests
- Every submission saved as an entry, with CSV export
- Per-form analytics: views, submissions, the conversion rate between them, and which field people were on when they gave up. Aggregate counters only, kept in your own database, with no third-party service and no charting library
- Email notifications with smart tags (
{all_fields},{field_id="2"}, …) - A confirmation email to the person who submitted, with no account or third-party service needed
- Show-a-message or redirect confirmations
- Invisible anti-spam (honeypot + time trap) out of the box; optional Cloudflare Turnstile
- A keyword blocklist you control, plus optional Akismet if you already use it. Suspected spam is held for review, not thrown away
- Trigger a SentientMail transactional email to the submitter (welcome emails, promo codes)
- Add subscribers to a Mailchimp audience, with your own field-to-merge-field mapping. Double opt-in by default, and a consent checkbox on the form is honoured
- Post each submission to a Slack channel, using the same smart tags as your notification emails
- Outgoing webhooks with HMAC signatures for anything else (Zapier, Make, custom apps)
- One-click import of WPForms forms and entries if you're switching
安装:
- Upload the plugin ZIP under Plugins → Add New → Upload Plugin, then activate it.
- You'll land on the Get Started screen. Paste your Events API key from SentientMail (Settings → API Keys).
- Add the Newsletter Signup form to a page: add a block and search "SentientMail Form", or paste the shortcode shown on the Get Started screen.
常见问题:
Do I need a SentientMail account?
No. Forms, entries, and email notifications work standalone. A free SentientMail account adds audience sync, journeys, and transactional email.
Where do submissions go?
Three places: the Entries screen in your dashboard, your notification email(s), and, if connected, your SentientMail audience.
Does it work with my page builder?
The [sentientmail_form id=123] shortcode works anywhere shortcodes are supported, and the block works in the standard editor.
What data does the plugin send to SentientMail?
Only what a form collects, and only when you've connected an API key and enabled sync for that form. A submission can also reach the other services listed under "External services" below, each of which you switch on yourself: a webhook address you enter, Mailchimp, Slack, Akismet, or Cloudflare Turnstile. With none of them configured and no API key entered, nothing leaves your site.
更新日志:
1.8.0
- Added: a confirmation email to the person who filled in the form. Turn it on per form under Notifications, choose which email field to write to, and set the subject and message; leave those blank for a plain acknowledgement. It sends through WordPress like any other notification, so no account anywhere is required. A submission the anti-spam checks flag never triggers one.
- Changed: the notification editor now offers the form's email fields in a dropdown for the confirmation, instead of expecting you to know the smart tag for one.
- Added: notifications now show when the form was submitted.
{all_fields}carries a "Submitted" line, so existing notifications gain it without being edited. - Fixed:
{date}gave the moment the message was built rather than the moment the form was submitted. On a notification re-sent from the Entries screen that stamped an old enquiry with today's date. - Security: the confirmation is capped at three messages an hour to any one address. The submission rate limiter counts per visitor, which is the wrong unit for a message addressed to whoever the visitor names, so a few hosts could otherwise have pointed a site's forms at one victim. Raise or remove it with the
sentfobu_submitter_email_hourly_capfilter.
- Fixed: forms silently discarded every submission. A local variable inside the submit handler had the same name as the helper that puts the button into its sending state, so the handler stopped with an error one line before the submission was sent. Nothing was saved, no notification went out, and the visitor saw no error. Introduced in 1.5.1 and present in every release since.
- Added: sites upgrading from the earlier SentientForms build keep their forms, entries and settings. Previously the plugin started empty beside the old one and everything stayed behind.
- Added: pages using the older
[sentientform]shortcode keep working, so nothing has to be edited on the day you switch.
- Fixed: choosing which role a form may create could raise an error if the value arrived in an unexpected shape. It is now reduced to a plain value and checked against the allowed list before use.
- Fixed: the block editor's form list used a data name left over from an earlier version of the plugin.
- Fixed: correcting one field could destroy an upload on another. Files were moved out of temporary storage while the rest of the form was still being checked, so an error anywhere left the upload unusable and a required file field impossible to satisfy. Uploads are now taken only once the whole submission is accepted.
- Fixed: a mistyped field could lock a visitor out of the form. A Cloudflare Turnstile check is good for one use, and it was spent before the form was checked, so every retry failed until the page was reloaded. The check now runs last, and the widget is reset after any failure.
- Fixed: a submission that could not be saved told the visitor it had gone through, and still sent the notifications. It now reports the failure and tells the site owner what was lost.
- Fixed: two things processing the queue at the same time could send the same webhook, Slack message or Mailchimp update twice.
- Security: the file upload endpoints accepted requests from anyone who knew a form's ID. They now require the signed token every form carries, and limit how much one visitor can have in progress.
- Security: uploaded chunks are written under a lock, so simultaneous requests can no longer push a file past the size limit it declared.
- Security: webhooks are sent over HTTPS only, and can no longer be pointed at addresses inside the server's own network.
- Fixed: values submitted through a form are neutralised before they are written to a CSV export, so a spreadsheet cannot treat them as formulas.
- Fixed: an entry's resume link only works on the form it belongs to.
- Fixed: reinstalling over an older version no longer skips the upgrade and comes up empty.
- Fixed: an array-typed query variable could reach a string-typed method and produce a fatal error on a public page. All request values are now type-checked before use.
- Changed: every internal name now uses a longer prefix, as the plugin directory requires. Existing forms, entries, settings and uploads are migrated automatically on upgrade.
- Changed: the admin menu, the Settings screen and the setup wizard are translatable.
- Renamed to SentientMail Form Builder.
- Renamed to SentientMail Form Builder.
- Added: Mailchimp. Enter your API key once under Settings, then per form choose an audience and map form fields to merge fields. Subscribers are added with double opt-in unless you choose otherwise, and if the form has a consent checkbox, nobody is subscribed without ticking it. An address already on the audience is not treated as an error, and someone who previously unsubscribed is never put back on.
- Added: Slack. Paste an incoming webhook URL into a form and each submission is posted to your channel, using the same smart tags as notification emails. Uploaded files and signatures are never posted; the message links to the entry instead, and it is posted as plain text so nothing a visitor typed can become a link or a channel mention.
- Security: only an https://hooks.slack.com/ address can be saved as a Slack webhook, so the field cannot be aimed at another server.
- Security: the Mailchimp API key and the Slack webhook URL are never shown again after saving, and are removed from any error recorded on the Integration Queue screen.
- Fixed: one integration job throwing an error ended the whole queue run, so a single broken destination could stall every other integration on the site. A failure now stays with the job that caused it.
- Fixed: the per-form "marketing consent" checkbox was not being read when a form was saved, so ticking it had no effect.
- Added: a keyword blocklist. Enter words or phrases in Settings and a submission containing any of them is held as a spam entry for review. Matching ignores case and spacing, and every entry is matched as the literal text you typed, so a line reading
.*blocks those two characters rather than every submission. - Added: optional Akismet checking, per form, using the key the Akismet plugin already has. Off by default, and inert with no key. If Akismet is unreachable the submission is accepted rather than lost, and a submission it flags is quarantined for review, never discarded.
- Security: notification sender name, from address and reply-to are now stripped of line breaks before they reach a mail header.
- Security: a form can no longer be configured to grant a role that can write posts. Only roles with read-only capabilities are offered.
- Security: the submission rate limiter only trusts a proxy-supplied client IP when the request arrived from a local reverse proxy, so a direct visitor cannot forge one to bypass the limit, and a site behind a proxy does not put every visitor in the same bucket. Override with the sentfobu_trust_proxy_ip filter.
- Fixed: the custom post type is now prefixed. Existing forms are migrated automatically on upgrade.
- Fixed: the editor's configuration is attached with wp_add_inline_script instead of a hand-written script tag.
- Fixed: the Plugin URI pointed at a page that returned 404.
- Added: an External services section in the readme documenting exactly what is sent to SentientMail and to Cloudflare Turnstile, with links to both services' terms and privacy policies.
- Verified against WordPress 7.1. The compatibility notice on this plugin was three major releases out of date.
- Added: update notices for the edition downloaded from our own site. The version published on WordPress.org is updated by WordPress.org like any other plugin and contains no update-checking code.
- Added: a per-form "marketing consent" option, for forms where the visitor is clearly opting in. It marks the contact as eligible for consent-gated journeys.
- Fixed: a welcome email could be sent twice if the delivery queue retried a job. Messages are now keyed so a retry cannot duplicate a send.
- Fixed: the file upload area could pick up a theme's button styling and render as a small coloured block instead of a drop zone.
- Fixed: a form whose stored settings had been damaged by another plugin or script rendered as nothing at all, with no error. Recoverable damage is now repaired automatically and reported in the error log.
- Added: calculation fields. Build a running total from other fields with a simple formula. The total is recalculated on the server, so it cannot be tampered with in the browser.
- Added: save and resume. Visitors can pick up a long form where they left off, from a link.
- Added: abandoned entry capture. See what people filled in before they gave up, so you can shorten the form or follow up. Off by default, and partial entries expire on their own.
- Added: create a WordPress user from a submission. Only roles that cannot manage the site can be granted, and the account gets a set-password email rather than a password typed into a form.
- Added: create a post from a submission, as a draft unless you choose otherwise.
- Added: conditional logic. Show or hide any field based on what was answered earlier, with all/any matching and ten comparisons. Enforced on the server as well as in the browser, so a field nobody saw can neither block a submission nor be smuggled into one.
- Added: multi-page forms with a progress indicator, per-page validation, and Next/Previous buttons you can label.
- Added: address, rating, consent and section-divider fields.
- Added: eight starter templates. "Add New" now opens a gallery instead of an empty form.
- Added: entry search, date filtering, spam/received tabs, bulk actions, resend notification, and CSV export that respects the current filter.
- Added: privacy controls per form. Turn IP logging off, set a retention window, and answer export or erasure requests through the normal WordPress personal-data tools.
- Added: an Integration Queue screen showing webhook and sync jobs, with retry.
- Added: full translation support. The plugin is now translatable and ships a .pot file.
- Changed: a submission caught by the honeypot is kept as a reviewable spam entry rather than being discarded. A browser autofill could previously destroy a genuine message with no record it ever arrived.
- Fixed: accessibility. Groups of choices now use fieldset and legend, errors are announced and tied to their field, and required fields are marked for screen readers.
- Fixed: importing from WPForms no longer drops page breaks, GDPR checkboxes, address or rating fields, and it now carries conditional logic across.
- Added: a notification that fails without raising an error is now logged and recorded from the submission handler too, closing the last path where a failed email could pass unnoticed.
- Added: failed notification emails are now recorded and surfaced as a dashboard warning. Previously a rejected email was invisible, so a submitter saw "received", the entry saved, and nobody was told an email never arrived.
- Fixed: audience sync and the Get Started key check sent an outdated authentication header, so connecting an account failed and contact sync never reached SentientMail. Both now send
X-Event-API-Key.
- Initial release: newsletter signups, form builder, entries, notifications, confirmations, chunked file uploads, SentientMail audience sync + transactional sends, signed webhooks, Turnstile, WPForms import.