The Bonnie Situation – Contact Form 7 Database & Auto-Delete
| 开发者 | nicksull |
|---|---|
| 更新时间 | 2026年11月2日 17:14 |
| PHP版本: | 8.1 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Capture every CF7 submission to a custom table, after mail handling, so it never delays or blocks your email.
- Browse, search, sort and filter submissions in a modern DataViews admin, with a per-submission detail view.
- Delete individual submissions permanently, on demand.
- Delete-only retention: suppress IP storage and automatically delete submissions after a configurable number of days — enforced daily by WP-Cron, with an audit log of every purge.
- Know when cleanup fails: if a purge fails or stops running (including WP-Cron not firing), Bonnie warns you in Site Health and with an admin notice, so data is never silently kept past your retention window.
- Subject-request tooling: integrates with WordPress's Tools → Export/Erase Personal Data so requests by email include captured submissions.
- Import from Flamingo and CFDB7: bring existing entries across in one click, under your privacy settings and retention window — the source plugin doesn't even need to be active.
do_not_store and consent_for:storage opt-outs are honoured. The plugin provides controls that support GDPR / UK GDPR / Australian Privacy Act / CCPA compliance; lawful basis and configuration remain the site operator's responsibility. This is not legal advice.
Bonnie Pro
This plugin is fully functional on its own: it captures submissions and enforces delete-only retention. Bonnie Pro, a separate add-on distributed off WordPress.org, adds:
- CSV / JSON export of the current view or selected rows.
- Address book of deduplicated contacts, with click-through to each contact's submissions.
- Trash workflow — soft-delete with a restore window and a hard cap that force-deletes trashed entries, instead of the free delete-only model.
- Bulk delete across selected submissions.
- Per-form overrides — each form sets its own policy, window, IP rule and field mapping on the Contact Form 7 editor.
- IP anonymisation — store a masked address (last octet / last 80 bits) instead of the full IP.
- Encryption at rest — names, emails, subjects and form fields encrypted in the database, with the key kept in wp-config.php.
- WP-CLI —
wp bonnie purgeruns the retention sweep on demand, andwp bonnie importruns the Flamingo / CFDB7 import from a script. - Failure alerts — email, Slack or webhook alerts when the scheduled cleanup fails or stops running, and a message when it recovers.
安装:
- Install and activate Contact Form 7 (Bonnie is an add-on for it).
- Upload the
the-bonnie-situationfolder to/wp-content/plugins/, or install through the Plugins screen. - Activate Bonnie through the Plugins screen.
- Visit Bonnie → Settings to choose your retention policy. Submissions are captured automatically from then on.
屏幕截图:
常见问题:
Does this interfere with Contact Form 7 sending email?
No. Capture runs after mail handling and is wrapped so a storage failure is logged silently rather than breaking the form.
Are IP addresses stored?
Not by default. IP storage is off out of the box. Bonnie Pro adds the option to anonymise (mask the last octet / last 80 bits) instead of storing the full address.
Does the free version keep a trash or recycle bin?
No. The free core is delete-only: submissions past their retention window are permanently deleted, with no second store to manage. Bonnie Pro adds an optional trash workflow — soft-delete with a restore window and a hard cap that force-deletes trashed entries.
Does Contact Form 7 save form submissions?
No. Contact Form 7 emails each submission and keeps nothing in the database. To keep a record you need a storage plugin — Bonnie stores every submission, then deletes it when your retention window ends.
How is Bonnie different from Flamingo or CFDB7?
Flamingo and CFDB7 save submissions but do not expire them: entries stay in your database until someone deletes them by hand, and neither removes its data when uninstalled. Flamingo also records the sender's IP address and user agent by default. Bonnie stores no IP by default, deletes each submission automatically after the number of days you choose, logs every purge, and supports both the WordPress personal-data exporter and eraser.
Can I import my existing Flamingo or CFDB7 entries?
Yes. Go to Bonnie → Settings → Import. Bonnie finds Flamingo and CFDB7 data in your database (the plugins can be active or deactivated) and imports it in batches. Imported entries follow your current settings: IP addresses, user agents and referrers are dropped unless you've turned them on, spam is skipped unless you capture spam, and entries already older than your retention window are skipped. Running it again only imports what is new. Nothing in the source plugin is changed — delete the old entries there once you've checked the import.
How long should I keep contact form submissions?
As short a time as you actually need them. GDPR's storage-limitation principle (and the Australian Privacy Act's equivalent) says personal data shouldn't be kept longer than its purpose requires; for enquiry forms, many sites choose 30 to 90 days. Bonnie enforces whatever window you set. This is not legal advice.
How do I guarantee purge timing on a low-traffic site?
Retention runs daily via WP-Cron. On sites with little traffic, trigger wp-cron.php from a real system cron so the sweep fires on schedule. If no cleanup has succeeded for 48 hours, Bonnie flags it in Site Health and on the dashboard.
What happens if the scheduled cleanup fails?
You're told. Bonnie records every cleanup run, and if one fails, or none has succeeded for 48 hours, it shows a critical item in Tools → Site Health and a notice on the dashboard and Bonnie's screens. If the daily schedule itself goes missing, Bonnie recreates it. The warning clears on the next successful run. Bonnie Pro can also send the alert by email, Slack or webhook.
更新日志:
- New: Bonnie records every retention run and warns in Site Health and with an admin notice when a purge fails, or when none has succeeded for 48 hours (for example, WP-Cron isn't running). A missing daily cron event is recreated automatically.
- Fix: a database error during a purge could be reported as a success and the purge skipped without any warning. Errors are now caught and reported, and the delete is rolled back.
- Fix: the purge audit log records the rows actually deleted. Previously a failed delete could be logged as successful.
- The global sweep and add-on retention scopes now run independently, so one failing no longer stops the other.
- For add-ons: new
bonnie_retention_failed,bonnie_retention_staleandbonnie_retention_recoveredactions, andbonnie()->retention_status().
- New: import existing entries from Flamingo and CFDB7 (Settings → Import). Works with the source plugin active or deactivated, applies your privacy settings, skips spam and entries already past their retention window, and never imports the same entry twice. Source data is left untouched.
- Fix: honour Contact Form 7's own storage opt-outs. Forms with
do_not_store: true, and submissions where aconsent_for:storagecheckbox is left unticked, are no longer stored; values ofdo-not-storeform tags (quiz answers, CAPTCHA) are dropped. - Imported entries pass through the same store filters as live captures, so add-ons (encryption at rest, address book) apply to them too.
- Add the
bonnie.settings.cardsJS filter so add-ons can add their own cards to the settings screen. - Database update: name, email, subject and user-agent columns become TEXT, and a new
email_hashcolumn supports exact-email lookups, so add-ons can store submissions encrypted. Runs automatically on update. - Add the
bonnie_email_hashfilter; search and the WordPress personal-data export/erase tools find encrypted submissions by exact email. - Encrypted values are shown as "[Encrypted]" rather than raw if the add-on that can decrypt them isn't active.
- Add the
bonnie_submission_display_ipfilter so add-ons can annotate the IP shown on a submission's detail view (display only; the stored value is unchanged). - Upgrade links to Bonnie Pro now carry campaign tags.
- Initial release: capture Contact Form 7 submissions to a custom table, a DataViews submissions admin (search/sort/filter with a per-submission detail view and permanent delete), delete-only retention with a scheduled daily purge and audit log, IP-storage suppression, and WordPress Personal Data export/erase integration.