=== Whitetip Forms Builder ===
Contributors: VinxTheLinx
Donate link: https://buymeacoffee.com/vinxthelinx
Tags: contact form, form builder, drag and drop, gdpr, translation-ready
Requires at least: 6.0
Tested up to: 7.0
Stable tag: 1.1.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Lightweight WordPress form builder featuring an intuitive drag-and-drop interface, high-performance database routing, and an advanced entry registry.

== Description ==

Whitetip Forms Builder is a developer-friendly and user-focused form builder designed for modern WordPress websites. Built with performance and top-tier security standards in mind, it allows you to create, manage, and scale complex forms without bloating your site's database.

With strict late-escaping, scope prefixing, and full localization support, Whitetip Forms Builder ensures maximum compatibility with the latest WordPress core standards.

=== Live Demo ===
Want to try Whitetip Forms Builder before installing it on your live site? 
**[Test the Free version instantly in a safe WordPress Playground](https://playground.wordpress.net/?plugin=whitetip-form-builder&login=1&url=/wp-admin/admin.php?page=whitetip-form-builder)**

=== Key Features ===
* **Intuitive Builder:** Create beautiful forms easily from the WordPress dashboard using a clean drag-and-drop interface and standard fields.
* **Submission Registry:** View, filter by form source, and safely manage user messages natively within your WordPress dashboard.
* **Global UI Themes:** Choose from professionally styled skins and apply them globally to all your forms in one click.
* **JSON Import & Export:** Instantly clone, backup, or migrate your complex form architectures between staging and production environments.
* **Privacy & GDPR Focused:** Features clean data management with a dedicated option to completely purge files, postmeta, and database entries upon uninstallation.
* **Localization:** Available in English (Default) and fully translated into Italian (IT).

=== Upgrade to Whitetip Forms Builder PRO ===
While the free version provides a robust foundation, **Whitetip Forms Builder PRO** is the ultimate enterprise-level infrastructure designed for developers, agencies, and demanding businesses.

Take your lead generation to the next level with exclusive premium features:

* **Advanced Conditional Logic:** Create smart, conversational forms. Dynamically show or hide specific fields based on user input and choices.
* **Native SMTP Engine:** Route all notifications safely through your custom SMTP server (Host, Port, Secure Encryption) to bypass spam folders and maximize delivery rates.
* **Custom HTML Blocks:** Seamlessly inject rich text, headings, or custom HTML layouts directly within your form structure.
* **Global Custom CSS:** Safely apply your own styling rules to override default themes directly from the dashboard.
* **Custom Email Templates:** Gain full control over your notifications. Design and customize automated admin alerts and user autoresponders exactly how you want.
* **Advanced Submission Actions:** Fully control the post-submission workflow. Set up custom URL redirects and tailored success behaviors.
* **Global Ready (Multilingual):** Reach an international audience instantly. The PRO version includes premium professional translations for German (DE), Spanish (ES), French (FR), Italian (IT), Polish (PL), Portuguese (PT), Russian (RU), and Chinese (zh_CN).
* **Google reCAPTCHA v3 Integration:** Next-generation invisible spam protection. Stop bots completely without annoying your users with tedious puzzles.
* **Form-Specific Theme Overrides:** Break global styling rules and apply specific premium themes (like Tech Cyber Dark) to individual forms *(Note: an expanded library of new premium themes is coming soon!)*.
* **'Hide in Frontend' Control:** Easily toggle the visibility of specific fields in the frontend while keeping them active for backend structural logic.
* **Dedicated Priority Support:** Get front-of-the-line, premium technical assistance directly from the developer.

**[Test Whitetip Forms Builder PRO instantly in a safe WordPress Playground](https://playground.wordpress.net/?blueprint-url=https://whitetipcode.com/blueprints/whitetip-forms-pro.json)**

**[Discover all features and Upgrade to Whitetip Forms Builder PRO today!](https://www.whitetipcode.com/prodotto/whitetip-forms-builder-pro/)**

== Installation ==

= From your WordPress dashboard =
1. Visit 'Plugins > Add New'.
2. Search for 'Whitetip Forms Builder'.
3. Click 'Install Now' and activate the plugin.

= Manual Installation =
1. Upload the entire `whitetip-form-builder` folder to the `/wp-content/plugins/` directory.
2. Activate the plugin through the 'Plugins' menu in WordPress.

== Frequently Asked Questions ==

= Where are form submissions stored? =
All incoming messages are stored securely using native WordPress Custom Post Types, ensuring maximum compatibility, stability, and safety for your data without requiring custom database schema changes.

= Does it support autoresponders for users? =
Yes. The plugin handles standard notifications natively, while Whitetip Forms Builder PRO unlocks fully customizable Email Templates for advanced autoresponders.

== Screenshots ==

1. The central workspace dashboard with form generation shortcodes.
2. Advanced entry registry featuring message preview and status flags.
3. Global Settings and JSON Import/Export panel.

== Changelog ==

= 1.1.4 =
* Security: Hardened file upload validation for the JSON import engine. Replaced generic array unslashing with strict, targeted sanitization using `sanitize_text_field` for the temporary path and `sanitize_file_name` for the file name.
* Security: Implemented native `is_uploaded_file()` verification prior to processing the uploaded JSON configuration, ensuring complete protection against path traversal vulnerabilities.
* Optimization: Added strict `isset()` checks to `$_FILES` array indices to prevent undefined index warnings and ensure full compatibility with WPCS and the Plugin Check tool.
* Compliance: Addressed and resolved the specific sanitization requirements requested by the WordPress.org Plugin Review Team.

= 1.1.3 =
* Compliance: Completely removed legacy backend data handling (saving, cloning, importing, and exporting) for per-form theme overrides to ensure 100% adherence to WordPress.org Free Plugin guidelines.
* Tweak: Minor typo corrections in the translation strings to remove references to premium feature overrides.

= 1.1.2 =
* Security: Implemented strict nonce verification and user capability checks on all submission views and state-changing actions to prevent CSRF vulnerabilities.
* Security: Added deep, recursive data sanitization to the JSON layout import engine to ensure completely safe processing before database insertion.
* Architecture: Formally registered the internal submissions Custom Post Type to adhere perfectly to WordPress core standards.
* Optimization: Purged legacy custom database table scripts and direct SQL queries from the uninstallation routine, fully embracing a cleaner, native CPT approach.
* Optimization: Removed orphaned JavaScript calls and legacy CSS rules related to unused visual options, ensuring a lighter and strictly standalone free version.
* Performance: Fixed an asset loading bug to guarantee that public CSS and JS files are strictly enqueued only on pages where the form shortcode is actively used.

= 1.1.1 =
* Optimization: Massively streamlined the core architecture to ensure strict compliance with WordPress.org directory standards.
* Performance: Removed unused JavaScript, CSS, and inactive backend modules, significantly reducing the plugin size and improving frontend load times.
* Security: Hardened the AJAX submission handler with stricter server-side validation to prevent runtime errors and ensure bulletproof data processing.
* Tweak: Refactored the core Email Engine for leaner, faster, and more reliable standard notification deliveries.
* Translation: Cleaned and updated the .pot template and Italian (.po/.mo) translation files for an optimized localization experience.

= 1.1.0 =
* Stable initial release.
* Built-in JSON Import/Export tools for seamless form migrations.
* Advanced custom database table structure for unbloated data management.
* Safe architecture audited against WordPress Security and Naming Conventions rules.