=== Lumo Forms – Drag & Drop Form Builder for WordPress ===
Contributors: wpfound
Tags: form builder, contact form, drag and drop
Requires at least: 6.4
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.3
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A free, standalone drag & drop form builder for WordPress. No dependencies on other form plugins.

== Description ==

**Lumo Forms** is a free, powerful WordPress form builder plugin featuring a custom drag & drop interface for building forms visually — no coding required.

= Features =
* Drag & drop form builder with live preview
* Basic fields: Text, Email, Textarea, Checkbox, Radio, Select/Dropdown, Hidden, Submit, Terms & Conditions
* Payment fields: Payment Item, Subscription, Custom Payment Amount, Payment Summary
* Simple field styling: color, spacing, font size
* Shortcode embedding: `[lumoform id="X"]`
* Gutenberg block for easy block editor integration
* Honeypot spam protection
* Captcha spam protection: Simple Math, Google reCAPTCHA v2, hCaptcha, Cloudflare Turnstile
* Email notifications (admin and user confirmation)
* Form submissions saved to custom database tables
* Save & reuse form templates (new)
* REST API endpoints

== Input Fields ==

**Available Input Fields**

* Name Fields
* Email
* Simple Text
* Text Area
* Address Fields
* Country List
* Dropdown
* Radio Field
* Checkbox
* Multiple Choice
* Website URL
* Time & Date
* Hidden Field
* Section Break
* Terms & Conditions
* Custom Submit Button
* Captcha (Math, reCAPTCHA v2, hCaptcha, Turnstile)
* Payment Item
* Subscription
* Custom Payment Amount
* Payment Summary

== Installation ==

1. Upload `lumo-forms` to `/wp-content/plugins/`
2. Activate via **Plugins → Installed Plugins**
3. Go to **Lumo Forms → Add New** to create your first form
4. Embed using the shortcode `[lumoform id="X"]` or the Gutenberg block

== Frequently Asked Questions ==

= Does this plugin require any other form plugins? =
No. Lumo Forms is fully standalone.

= How do I embed a form? =
Each form automatically generates a shortcode like `[lumoform id="1"]`. You can also use the Lumo Forms Gutenberg block, or call `do_shortcode('[lumoform id="1"]')` in PHP templates.

= Where are form submissions saved? =
All submissions are saved in custom database tables (`wp_lumo_forms`, `wp_lumo_submissions`). You can view, filter, and export them from **Lumo Forms → Entries**.

= Is this GDPR-compliant? =
The plugin stores IP addresses and user agents with submissions. You can disable this in Settings. We recommend adding a consent checkbox to forms collecting personal data.

= How do I enable captcha? =
Go to **Lumo Forms → Settings → Spam Protection**, choose a provider and add API keys (not needed for Simple Math). Then open your form in the builder and enable Captcha under General → Spam Protection.

== External services ==

This plugin can connect to third-party captcha and payment services when you enable them and configure credentials. No data is sent to these services until you enter your own API keys and a visitor interacts with a form that uses them.

= Google reCAPTCHA =

Used to verify that a visitor is human when Google reCAPTCHA v2 is enabled on a form.

Data sent: captcha response token and visitor IP address (when available). Sent only when a visitor submits a form with reCAPTCHA enabled.

Service provider: Google LLC
Terms of Service: https://policies.google.com/terms
Privacy Policy: https://policies.google.com/privacy

When reCAPTCHA is enabled, the plugin loads scripts from https://www.google.com/recaptcha/.

= hCaptcha =

Used to verify that a visitor is human when hCaptcha is enabled on a form.

Data sent: captcha response token and visitor IP address (when available). Sent only when a visitor submits a form with hCaptcha enabled.

Service provider: Intuition Machines, Inc.
Terms of Service: https://www.hcaptcha.com/terms
Privacy Policy: https://www.hcaptcha.com/privacy

When hCaptcha is enabled, the plugin loads scripts from https://js.hcaptcha.com/.

= Cloudflare Turnstile =

Used to verify that a visitor is human when Cloudflare Turnstile is enabled on a form.

Data sent: captcha response token and visitor IP address (when available). Sent only when a visitor submits a form with Turnstile enabled.

Service provider: Cloudflare, Inc.
Terms of Service: https://www.cloudflare.com/website-terms/
Privacy Policy: https://www.cloudflare.com/privacypolicy/

When Turnstile is enabled, the plugin loads scripts from https://challenges.cloudflare.com/.

= Form Template Library =
Skip the blank canvas. Lumo Forms ships 6 ready-made forms — import any of them into the builder with a single click, then make it yours.
* **Contact Form**
* **Marketing Form**
* **Feedback Form**
* **Payment Form**
* **General Form**

= Stripe =

Used to process one-time and subscription payments when Stripe is configured and a form includes payment fields.

Data sent: payment amount, currency, billing details submitted by the visitor, and transaction metadata required to complete the charge. Sent only when a visitor submits a payment form.

Service provider: Stripe, Inc.
Terms of Service: https://stripe.com/legal/consumer
Privacy Policy: https://stripe.com/privacy

When Stripe is enabled, the plugin also loads Stripe.js from https://js.stripe.com/ to render secure card fields in the browser. Card details are sent directly to Stripe and are not stored by this plugin.

= PayPal =

Used to process payments when PayPal is configured and a form includes payment fields.

Data sent: payment amount, order details submitted by the visitor, and transaction metadata required to complete the payment. Sent only when a visitor submits a payment form.

Service provider: PayPal Holdings, Inc.
Terms of Service: https://www.paypal.com/us/webapps/mpp/ua/useragreement-full
Privacy Policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

== Changelog ==

= 1.0.3 =
* Fixed critical PHP fatal error on hosts running PHP 7.4 (removed PHP 8-only syntax: match, mixed, union types)
* Added captcha spam protection: Simple Math, Google reCAPTCHA v2, hCaptcha, and Cloudflare Turnstile with server-side verification
* Added form templates feature: save and reuse form templates across sites 

= 1.0.2 =
* Improved form builder UI
* Improved Textarea field

= 1.0.1 =
* Fixed Gutenberg block script localization object name to use the lumoForms prefix
* Confirmed Plugin URI points to a live site (https://wpfound.dev/)
* Set Author URI to the WordPress.org profile so it differs from Plugin URI

= 1.0.0 =
* Initial release
