Sobi Forms

Description

Sobi Forms is a lightweight contact form plugin built for speed and simplicity. Create multiple forms, embed them anywhere with a shortcode or Gutenberg block, and keep your front-end lean.

Learn more on the official site: sobiforms.com — features, FAQ, and the public roadmap.

Performance-first front-end

• Vanilla JavaScript on the front-end
• ~2.5 KB CSS + JS combined (gzipped transfer; ~8 KB unminified source on form pages)
• Assets enqueue only when a form is rendered on the page – zero impact on other pages
• Script loaded in the footer with defer strategy (WordPress 6.3+)
• No global front-end CSS frameworks

Form builder (admin only)

• Document-first drag-and-drop editor (React via WordPress wp-element, loaded only on the form edit screen)
• Field types: text, email, textarea, phone, number, select, multiple choice (radio tiles), multi-option checkbox
• Field settings: number min/max; text min/max characters; show/hide label; textarea resize and max length
• Radio and multi-checkbox options edited inline in the builder (add option, remove on hover); dropdown options in the field menu
• Multiple recipient emails per form
• After submit: inline success message or redirect to a published page
• Availability: pause a form or auto-close at a date/time, with a visitor message when closed

Embedding

• Shortcode: [sobiforms], [sobiforms id="3"], [sobiforms slug="contact"]
• Gutenberg block: Sobi Forms Contact with form picker
• Works with any page builder that supports shortcodes or blocks

Submissions

• Email notifications via wp_mail() (HTML)
• Optional database storage (off by default)
• Inbox with read/unread, starred, spam queue, admin notes, search and filters
• Optional Akismet spam filtering (when the Akismet plugin is active)
• Honeypot, nonce verification, rate limiting (5 submissions/hour per hashed IP)

Security

• Nonce on every submission
• Honeypot field
• Server-side field validation against a strict JSON schema
• Capability checks and nonces on all admin actions
• Optional Akismet integration — spam submissions quarantined when the Akismet plugin is active

Privacy Policy

Sobi Forms processes data submitted through your forms. By default:

• Email only – field values are sent to the recipient address(es) you configure per form via wp_mail(). Nothing is stored in the database unless you enable storage.
• Optional database storage – when enabled per form (Forms → edit form → Settings), submissions are saved in custom tables on your site (wp_sobiforms_submissions, wp_sobiforms_forms). Each form has its own retention setting (auto-delete after N days).
• Hashed IP – when storage is enabled, a one-way SHA-256 hash of the visitor IP is stored with each submission for abuse prevention. Raw IP addresses are not stored.
• Rate limiting – a transient keyed by hashed IP limits submissions to 5 per hour. Transients expire automatically.
• Admin notes – internal notes on submissions are stored in your database and never shown on the front-end or included in emails.
• No tracking – Sobi Forms does not connect to third-party analytics or advertising when processing form submissions.
• Optional Akismet – if you enable Akismet spam filtering and the Akismet plugin is active, submission content may be sent to Akismet’s service for spam checks.
• No data sent to the plugin author – form submissions stay on your server and mail server. The Feedback settings tab links to the ww.wp.xz.cn support forum and sobiforms.com/roadmap only if you choose to open them.

Site owners are responsible for their privacy policy and lawful basis for collecting visitor data.