Secure and accessible PHP contact form for WORDPRESS

Created by Mike Cherim and I, this is a wordpress plugin that lets you have your own accessible, usable, spam-proof, secure, contact form on your wordpress blog!

I haven’t seen many contact form plugins for wordpress, but this is certainly one of the best, I can say that now. We hope you enjoy using this plugin, and that it saves you from lots of horrid spam.

Read more for more information, installation instructions, and of course, the download link!

Secure and accessible PHP contact form v.2.0WP

By Mike Cherim ( http://green-beast.com/ ) and Mike Jolley ( http://www.blue-anvil.com )

Index

What is it?

Well, this could well be the best, most accessible, spam proof contact form available, and its now a wordpress plugin!

Based on the PHP contact forms by Mike Cherim, Mike and I have developed a fully configurable, spam-proof, wordpress contact form plugin.

By adding a simple tag to a wordpress page you can have a fully featured contact form, great if you don’t want your email address harvested by spam bots!

This plugin lets you add a contact form to a wordpress page or a template, and after configuration, works a treat. It is fully customisable with CSS, and even has a few themes contained to get you started.

Documentation & the readme file is included in the zip, and the help file will show in your wordpress control panel too.

Mike Cherim also has a page dedicated to this plugin, find it here.

To see this plugin in action, take a look at my contact page.

Also remember, we have a multi-user version available (for use, for example, if you have multiple departments each wanting seperate messages) for a small fee, contact us for more information.

Features

The PHP form itself, its accessibility and usability features can be found on its official page here, but here are some plugin specific features and some highlights.

Easy to use form Overview page, with config information, and spam count.
Great security measures implemented, to prevent spam and high-jacking.
Form designed with accessibility and usability in mind.
Standards compliant code and form, with XHTML and HTML strict support.
Simple setup, with helpful prompts and extensive documentation.
Configuration built into the wordpress interface, no need to edit any code manually.
Easy to style, either using your own CSS files, are in-built editor, or a pre-made theme for the most popular wordpress themes.

Files In the zip

The following files are provided with the download:

/wp-gbcf_readme.txt — Instructions and installation information
/wp-gbcf/index.php — Prevents snoops looking at the files…
/wp-gbcf/wp-gbcf_focus.js — Javascript Form field focus for Internet Explorer
/wp-gbcf/wp-gbcf_form.php — Main plugin file
/wp-gbcf/wp-gbcf_help.php — Documentation library
/wp-gbcf/wp-gbcf_themes/ — Themes are inside this folder, you can add your own here if you want.
/wp-gbcf/wp-gbcf_themes/wp-gbcf_images/ — Theme file’s images

Plugin History

7th April 2007 – v.2.0WP B20070407 – From Mike C : I made several small modifications in the wp-gbcf_form.php to even further enhance security. I also modified the mail header to extract the character set from the blog settings instead of hard-coding it. It was hard-coded utf-8, and on most blogs will remain as such, but now that can be modified if the webmaster has selected another charset for their blog. The documentation file, wp-gbcf_help.php, was also updated.
29th March 2007 – v.2.0WP B20070329 – In the wp-gbcf_form.php file the blockquote’s cite attribute in the success result was changed, the “Referrer Mismatch” error was modified, the random exploit distribution codes were changed, and mail function detection was added to help users determine if they can use the form.
3rd March 2007 – v.2.0WP B20070303 – The ordering of the negotiations was modified in the wp-gbcf_form.php file for even greater email security. A line in the wp-gbcf_help.php file was also changed. Say thanks to Mike C Again
13th Feb 2007 – v.2.0WP B20070213 – A modification was made to the wp-gbcf_form.php file to update the header injection exploit error message. The on-board documentation file, wp-gbcf_help.php, was also edited (it needed it) — hopefully it’s 100% typo-free (though that’s doubtful). All index.php files were modified. Recommendation: Swap out the wp-gbcf_form.php, wp-gbcf_help.php, and all folder index.php files. Say thanks to Mike C
4th Feb 2007 – v.2.0WP B20070204 – Mulitple modifications and improvements made to the wp-gbcf_form.php file to plug a potential header inject exploit hole, enhance database and form performance, and allow content to be added to top of form (with instructions to add content at bottom in FAQ). Configuration was re-ordered (moved CC option control to section 5). Updated the Overview page. The on-board documentation file, wp-gbcf_help.php, was also updated and now includes instructions on make a contact page template. Multiple style sheets were added for non-specific themes. Affects first 3481 downloads. Recommendation: Swap out the wp-gbcf_form.php and wp-gbcf_help.php files.
20th Jan 2007 – v.2.0WP 20070121 -
1. Minor tweaks made to the wp-gbcf_form.php to negotiate IP
  addresses differently, changed character set to UTF-8 to allow more
  characters in emails, fixed a typo, and changed the “from” to the sender to
  allow use with host that require SMTP authentication. Recommendation: Swap out the wp-gbcf_form.php file.
5st Nov 2006 – V2.0WP B20061105 -
1. Minor tweaks made to the wp-gbcf_form.php file to make it look nicer in the source and play nicer with other WP plugins because not all terminate with a newline as they should.
2. Also made one tweak to mitigate the possibility of an “open relay attack” being carried out.
3. Recommendation: Swap out the wp-gbcf_form.php file.
1st Nov 2006 – V2.0WP B20061101 -
1. Fixed the referrer issue once and for all.
2. Fixed browser “auto-fill” issue.
3. Added ” Offer carbon copy option” as a Config option (yes is default).
4. Updated and corrected Documentation page (Config and FAQs).
5. Added note next to CC tabindex field.
6. Updated Overview page to show new Gen Config options.
7. Make a new CC email to strip some of the data-collected and address the
  form submitter more personally.
8. Added second mail() function to handle CC mail.
9. Updated build number.
10. Fixed $_post issue to avoid form submitting itself occasionally.
11. Minor optimisations.
26th October 2006 – V2.0WP B20061026 – Fixed small bug with concerning referring url and form location.
25th October 2006 – V2.0WP – Plugin Released, no known errors or bugs.

So, what are you waiting for? Download it now!