Unomoon Form

Unomoon Form creates mail forms with confirmation screens using shortcodes. It is a GPL fork of MW WP Form by inc2734 / Web の相談所. Unomoon Form は、ショートコードで確認画面付きのメールフォームを作成できます。MW WP Form の GPL フォークです。 Why this fork exists The upstream project states on its official site that development is halted except for vulnerability fixes, that it will not re-verify the plugin each time WordPress is updated, and that users should consider migrating to another plugin. As of this writing, upstream is still marked "tested up to 6.4" while WordPress 7.1 has shipped. This fork exists to do the two things upstream has stopped doing:

1. Track upstream security fixes. Every fix released upstream is ported here.
2. Keep verifying against current WordPress. Each release is tested on the latest WordPress.

Nothing about the form workflow is changed. If you are happy with MW WP Form and do not need either of the above, there is no reason to switch. 上流は公式サイトで「開発は脆弱性対応を除き停止」「WordPress のアップデートのたびに動作確認はしない」「他のプラグインへの乗り換えを検討してほしい」と表明しています。本フォークは、上流が行わなくなった セキュリティ修正の追随 と 最新 WordPress での動作検証 を引き受けることを目的としています。フォームの作成フロー自体は変更していません。 Differences from MW WP Form This fork migrates plugin identifiers, post types, shortcode prefixes, hooks, assets and admin labels to the unomoon-form / unomoonform_* namespace. Shortcodes are not compatible: [mwform_text] becomes [unomoonform_text], and so on. The two plugins can therefore be installed side by side, but forms are not shared between them. プラグイン識別子、投稿タイプ、ショートコード接頭辞、フック、アセット、管理画面ラベルを unomoon-form / unomoonform_* 名前空間へ移行しています。ショートコードに互換性はありません。 Features

• Shortcode-based form creation
• Confirmation screen
• Same-page or separate-page transitions
• Validation rules
• Admin notification email and automatic reply email
• Inquiry data storage
• Chart display for saved inquiry data
• Japanese translation available

主な機能: ショートコードによるフォーム作成／確認画面／同一 URL または個別 URL での画面遷移／バリデーションルール／管理者宛メールと自動返信メール／問い合わせデータ保存／保存データのグラフ表示／日本語対応 Documentation Japanese documentation, including how this fork differs from MW WP Form and the things people commonly trip over: https://cielos.phantomoon.com/unomoon-form/ Credits Original plugin: MW WP Form by inc2734, currently maintained by Web の相談所. Upstream repository: https://github.com/web-soudan/mw-wp-form Upstream site: https://mw-wp-form.web-soudan.co.jp Third-party resources The following libraries are bundled with the plugin. No external scripts, styles or fonts are loaded at runtime.

• Chart.js (MIT) — renders the inquiry data charts. https://www.chartjs.org/ / https://github.com/chartjs/Chart.js
• jQuery UI "smoothness" theme CSS (MIT) — styles the date picker and admin widgets. https://jqueryui.com/ / https://github.com/jquery/jquery-ui
• jQuery UI MonthPicker (MIT) — month picker widget. https://github.com/KidSysco/jquery-ui-month-picker

Version numbers are <upstream version>.<fork release>. For example 5.1.6.1 is the first fork release that has caught up with upstream 5.1.6; a fix of our own on top of it would be 5.1.6.2, and catching up with upstream 5.1.7 would be 5.1.7.1. Releases before this plugin was submitted to the directory were published on GitHub only, and used a -uno.N suffix (5.1.6-uno.1). The suffix was dropped because stable tags here may contain only numbers and periods. 5.1.6.3

• Resolved all Plugin Check warnings. Intentional error_log() calls (mail delivery and upload failures) and the transient-cached direct query are now annotated with the reason; template variables set by _render() are marked as method-local.
• Replaced the no-op error handler around the session cookie with a headers_sent() guard, matching the CSRF cookie code.
• Added a plugin icon for the WordPress.org directory.

5.1.6.2

• Renamed the plugin from "Uno WP Form" to "Unomoon Form" to comply with the WordPress.org naming rules. All identifiers moved to the unomoon-form / unomoonform_* namespace: shortcodes are now [unomoonform_*], hooks unomoonform_*, the form post type unomoon-form. Sites migrating from Uno WP Form must run the migration script shipped in the GitHub repository (tools/migrate-from-uno-wp-form.php).
• Replaced Google Charts with a bundled copy of Chart.js, and bundled the jQuery UI theme CSS. The plugin no longer loads anything from external servers.
• Security: Bound session data to a plugin-prefixed transient key and validate the session cookie format.
• Security: Sanitize all request input (nonce values, settings, inquiry data, chart settings, query strings, server variables) and escape placeholder values substituted into form content.
• Security: Use wp_handle_upload() for temporary file uploads and generate attachment metadata for saved files.
• Removed the mail debug log written to the uploads directory.
• Moved inline scripts and styles to wp_add_inline_script() / wp_add_inline_style().
• Added direct-access guards to every PHP file.
• Translations are now delivered through translate.wordpress.org instead of bundled files.

5.1.6.1

• Changed the version numbering scheme, dropping the -uno.N suffix. Same code as 5.1.6-uno.1 on GitHub.
• Security: Neutralize shortcode syntax in values rendered on the completion screen. A shortcode typed into a form field was executed when the completion screen substituted the value. Ported from upstream 5.1.5.
• Security: Tighten output escaping on the inquiry data list screen. Meta keys derive from mail-content tags and were printed verbatim into HTML id / class attributes and the Screen Options panel. Column identifiers are now mapped to safe slugs. Ported from upstream 5.1.5 and 5.1.6.
• Security: Add output escaping to the dynamic column labels, response_status and admin_mail_to. Ported from upstream 5.1.5.
• Tested on WordPress 7.1.

5.1.4.1

• Initial release of the fork, based on MW WP Form 5.1.4.
• Migrated identifiers, post types, shortcode prefixes, hooks, assets and admin labels to the uno-wp-form / unoform_* namespace (renamed again to unomoon-form / unomoonform_* in 5.1.6.2).