Logicoo Form

Katrangan

Logicoo Form is a form builder for WordPress, developed by Logicoo.dev. Build contact, registration, quote and order forms with a visual builder, split them into several pages, show or hide fields with conditional logic, calculate totals automatically and keep every submission in a dedicated, easy-to-use entries screen.

Every form works with plain HTML first: JavaScript only adds enhancements (step navigation, live summary, drag and drop uploads), so a form can still be filled in and submitted when JavaScript is disabled (except forms that use reCAPTCHA or a digital signature, see the FAQ). The plugin makes no remote calls by default and contains no tracking or telemetry. When it is uninstalled it removes its tables, forms, settings and stored files, unless you choose to keep them.

Features

• Visual form builder (meta box in the form editor): multiple pages, drag and drop field ordering, column widths, and AND/OR conditional logic between fields.
• Field types: text, email, textarea, select, checkbox, radio buttons, two-column text, phone number, website (URL), date, time, quantity, rating (stars or slider), total, total quantity, file upload, digital signature, section and free HTML.
• Works without JavaScript: a single server-side submission handler processes AJAX and classic POST submissions in exactly the same way; after an error the form comes back with the answers filled in and each error next to its field. JavaScript progressively adds step navigation, page-by-page validation, the attachment dropzone and the +/- quantity buttons. Forms with reCAPTCHA or a digital signature field require JavaScript.
• Email notifications: several independent notifications per form, with fixed recipients or a recipient taken from a field, Reply-To, placeholders ({field_id}, {ref}, {all_fields}, {summary}) and AND/OR sending conditions. Uploaded files are attached by default only to notifications sent to a fixed address; the generated PDF can be attached to any notification.
• Entries screen: paginated list filterable by form, single and bulk deletion, details window and CSV export.
• Numeric values and “Total” field: assign a numeric value to each option of a select, checkbox or radio field, or a price to a Quantity field; a dedicated Total field sums the selected values (optionally multiplied by a linked Quantity field) with a live preview while the visitor fills in the form. The saved total is always recalculated on the server.
• Quantity-based pricing: price tiers per option or per Quantity field (per unit, progressive or package price), applied automatically in the Total field.
• Live summary and review step: a real-time summary of the values entered, and a review of all answers before the final submission.
• PDF generation: optionally generate a PDF when a form is completed, with logo, custom header and footer text and the form fields (including the signature). Admins can download it from the entries screen and attach it to notification emails.
• Digital signature field: an interactive drawing area (mouse or touch); the image is stored in a dedicated protected folder, never in the public media library. See the FAQ about its legal value.
• Submission limits per form: a maximum number of submissions per IP address, anonymous session, registered user or overall, or a maximum cumulative value of a field, with a customizable message.
• Save and continue later: visitors can save an unfinished form and receive an email with a link to resume it before a configurable expiry date.
• Automatic cleanup (Autoclean): scheduled removal of entries older than a configurable number of days, including their uploaded files, signatures and PDFs. Off by default.
• Statistics page: views, submissions and conversion rate per form. Off by default; views are counted only while it is on.
• Import / export: export and import the configuration of a form as JSON (structure, notifications, settings and submission limits) and export entries as CSV. An imported form is created as a draft.
• reCAPTCHA v2 / v3 by Google, enabled per form (see “External services” below).
• Rate limiting of successful submissions per IP address and form, with configurable threshold and window, and optional trusted proxies.
• Privacy tools integration: personal data export and erasure through the native WordPress privacy tools, plus an option not to store the sender’s IP address and browser user agent.
• Clean uninstall: removes the plugin tables, all forms (also in the trash), all settings and temporary data, and the protected folder with uploaded files, signatures and PDFs, on every site of a multisite network, with an explicit option to keep the data.
• Translation ready: every visible string uses the logicoo-form text domain; the source strings are in English, and translations are delivered by translate.wordpress.org.

External services

This plugin can make the following calls to external services. They are never enabled by default.

• Google reCAPTCHA (v2 or v3): if an administrator enables reCAPTCHA for a form, the visitor’s browser loads Google’s script from https://www.google.com/recaptcha/... and the server sends a verification request to https://www.google.com/recaptcha/api/siteverify (the token generated by the widget and, unless IP anonymization is enabled in the plugin settings, the sender’s IP address). This only happens when the administrator has entered their own reCAPTCHA keys and enabled the feature on at least one form. Google’s Terms of Service and Privacy Policy apply.

The “Check protection” button in the “Status and Support” tab, when an administrator clicks it, requests one of the protection files of the private upload folder from the site’s own address, to tell whether the folder can be read from the web; nothing is sent to any other address.

No other remote calls, tracking or telemetry are present in the plugin. In particular, the plugin does not include any self-hosted update checker: updates are delivered exclusively through WordPress.org.

Privacy

Logicoo Form stores the submissions sent through the forms published on your site: the submitted values, the submission date, and the sender’s IP address and browser user agent (both can be disabled with one option in the plugin settings). If a form has a submission limit per registered user or per anonymous session, the user ID or a random browser identifier (stored in a first-party cookie) is saved with the entry. This data stays in the plugin’s table until an administrator deletes it manually, until it is removed by Autoclean if enabled, by a personal data erasure request, together with its form when the form is deleted permanently, or until the plugin is uninstalled (unless the administrator has explicitly chosen to keep the data).

The plugin integrates with the native WordPress privacy tools: a personal data export request for an email address finds every entry that contains it or that was sent by that registered user. An erasure request deletes the entries that belong to that person (the address is in the form’s identifying email field, by default the first Email field, or the entry was sent by that registered user) and, in entries of other people that mention the address, anonymizes only the address. WordPress keeps a whole personal data export in a single database value: for a person with thousands of entries (roughly 1,500 for every MB of the MySQL max_allowed_packet setting) WordPress may leave the later entries out of the export file without showing an error. Raising max_allowed_packet avoids it.

Uploaded files, signature images and generated PDFs are stored in a dedicated subfolder (logicoo-form-private/) that is never given a public URL: they can only be downloaded from the entries screen by an authenticated administrator with the required capability. The plugin writes deny-all protection files for Apache (.htaccess) and IIS (web.config) in that folder and restores them before every write; Nginx ignores those files, and Apache ignores .htaccess when the server configuration does not allow it (AllowOverride None): in those cases the matching rule shown in the “Status and Support” tab (Nginx or Apache) must be added to the server configuration. The “Check protection” button in that tab tells whether the folder can be read from the web. These files are deleted together with their entry and when the plugin is uninstalled, unless the administrator has chosen to keep the data.

After a submission without JavaScript, the outcome (and, after an error, the submitted values, to fill the form in again) is kept for at most 15 minutes and deleted as soon as the page shows it.

If a form has “Save and continue later” enabled, an unfinished submission can be temporarily stored together with the email address supplied by the visitor for sending the resume link. The draft is deleted when the form is submitted from its resume link, and otherwise by a daily cleanup when it expires.