Whitetip Forms Builder

Whitetip Forms Builder is a developer-friendly and user-focused form builder designed for modern WordPress websites. Built with performance and top-tier security standards in mind, it allows you to create, manage, and scale complex forms without bloating your site's database. With strict late-escaping, scope prefixing, and full localization support, Whitetip Forms Builder ensures maximum compatibility with the latest WordPress core standards.

From your WordPress dashboard

1. Visit 'Plugins > Add New'.
2. Search for 'Whitetip Forms Builder'.
3. Click 'Install Now' and activate the plugin.

Manual Installation

1. Upload the entire whitetip-form-builder folder to the /wp-content/plugins/ directory.
2. Activate the plugin through the 'Plugins' menu in WordPress.

1.1.4

• Security: Hardened file upload validation for the JSON import engine. Replaced generic array unslashing with strict, targeted sanitization using sanitize_text_field for the temporary path and sanitize_file_name for the file name.
• Security: Implemented native is_uploaded_file() verification prior to processing the uploaded JSON configuration, ensuring complete protection against path traversal vulnerabilities.
• Optimization: Added strict isset() checks to $_FILES array indices to prevent undefined index warnings and ensure full compatibility with WPCS and the Plugin Check tool.
• Compliance: Addressed and resolved the specific sanitization requirements requested by the WordPress.org Plugin Review Team.

1.1.3

• Compliance: Completely removed legacy backend data handling (saving, cloning, importing, and exporting) for per-form theme overrides to ensure 100% adherence to WordPress.org Free Plugin guidelines.
• Tweak: Minor typo corrections in the translation strings to remove references to premium feature overrides.

1.1.2

• Security: Implemented strict nonce verification and user capability checks on all submission views and state-changing actions to prevent CSRF vulnerabilities.
• Security: Added deep, recursive data sanitization to the JSON layout import engine to ensure completely safe processing before database insertion.
• Architecture: Formally registered the internal submissions Custom Post Type to adhere perfectly to WordPress core standards.
• Optimization: Purged legacy custom database table scripts and direct SQL queries from the uninstallation routine, fully embracing a cleaner, native CPT approach.
• Optimization: Removed orphaned JavaScript calls and legacy CSS rules related to unused visual options, ensuring a lighter and strictly standalone free version.
• Performance: Fixed an asset loading bug to guarantee that public CSS and JS files are strictly enqueued only on pages where the form shortcode is actively used.

1.1.1

• Optimization: Massively streamlined the core architecture to ensure strict compliance with WordPress.org directory standards.
• Performance: Removed unused JavaScript, CSS, and inactive backend modules, significantly reducing the plugin size and improving frontend load times.
• Security: Hardened the AJAX submission handler with stricter server-side validation to prevent runtime errors and ensure bulletproof data processing.
• Tweak: Refactored the core Email Engine for leaner, faster, and more reliable standard notification deliveries.
• Translation: Cleaned and updated the .pot template and Italian (.po/.mo) translation files for an optimized localization experience.

1.1.0

• Stable initial release.
• Built-in JSON Import/Export tools for seamless form migrations.
• Advanced custom database table structure for unbloated data management.
• Safe architecture audited against WordPress Security and Naming Conventions rules.