BoldForm – Drag & Drop Form Builder

Changelog

1.1.2

Improvements:
* Improve: Added an “Upgrade to Pro” page and CTAs comparing Free vs Pro features, so it’s easy to see what BoldForm Pro adds.
* Improve: The Entries list now supports bulk actions — select multiple submissions and mark them Read, Unread, Starred, or Spam, or delete them in one step.
* Improve: Added an “Export Selected” button on the Entries list to export just the checked submissions to CSV.
* Improve: Reorganised the Tools screen into separate Forms and Entries tabs, and added a standalone Entries export so you can download submissions on their own.
* Improve: Added a Documentation menu to the admin toolbar with quick links to the User and Developer guides.
* Improve: Expanded the Elementor widget with a Range Slider styling section and typography controls for input text.
* Improve: Exporting a form now bundles the submit button’s custom SVG icon inside the export file, so the icon is recreated on the destination site and keeps working after the form is imported on another website.

Fixes:
* Fix: Several form and settings values no longer reset to their defaults after saving and reopening — page-redirect type, duplicate-submission prevention, and field style are all preserved.
* Fix: Saving one Settings tab (General, Captcha, or SMTP) no longer clears the settings on the other tabs.
* Fix: Custom column widths in the form builder are now kept when a form is saved.
* Fix: Resolved a form scheduling issue so scheduled open/close windows behave correctly.
* Fix: The submit button’s Icon Color now applies reliably to both Dashicon and custom SVG icons — in the builder preview and on the front end — and the colour swatch updates live as you pick.
* Fix: An icon-only submit button (an icon with no button text) is no longer reset to “Submit” after saving and reopening the form.
* Fix: Tidied spacing and sizing across the form builder’s field settings panel, so controls align consistently — the Quantity field’s Min/Max/Default inputs, the “Enable search” toggle, the option and repeater “Add” buttons, and the payment product option rows.
* Fix: The Documentation menu now also appears in the toolbar on the Integrations page, so the admin navigation is consistent across every screen.

Maintenance:
* Update: Removed unused files and empty folders from the plugin package for a cleaner, lighter install.

1.1.1

Improvements:
* Improve: Redesigned the Integrations settings dialog, and a connection now switches on immediately after you save it — no second click needed.
* Improve: The Forms and Entries list tables stay usable on small screens — wide tables scroll within their card instead of stretching or breaking the page layout.
* Improve: The Entries admin menu now shows an unread-submissions count badge (like the Comments menu) so new entries are visible at a glance.
* Improve: Expanded the User Guide and Developer Guide with step-by-step setup instructions and screenshots for every integration, plus smooth in-page navigation.

Fixes:
* Fix: Conditional Logic rules now save reliably — multi-condition rules and the ALL/ANY match mode are preserved when a form is reopened in the builder.

Developer:
* Developer: New extension hooks for add-ons — boldform_defer_post_save_actions (hold the entry-created action and notification emails until an entry is finalised), boldform_auto_populate_value (resolve any auto-populate key through a single filter), and boldform_entry_value_admin_html (return rich HTML for an entry value on the admin detail screen only). A boldform_form_reset event now fires on the document after a successful AJAX submit so custom field widgets can re-sync.
* Developer: The bundled Appsero SDK now lives under includes/appsero/, and tag source archives strip development-only files via .gitattributes.

1.1.0

New features:
* New: Dual-handle range slider — an opt-in “Dual range (min–max)” mode renders two handles with a filled track and validates the selected range on submit.
* New: Greatly expanded Style tab with live preview — field, label, and submit-button styling update instantly beside the controls, with Normal/Hover/Focus/Checked state tabs across every section, selectable Design Themes, gradient backgrounds, a styled file-upload drop-zone, sub-field label styling, container alignment and max-width, and per-device (desktop/tablet/mobile) responsive values.
* New: Help & Support page with links to the User Guide, Developer Guide, Support, Community, Leave a Review, and Request a Feature.
* New: “Mark as Spam” entry action and a Spam filter tab on the Entries screen.
* New: The BoldForm logo now appears throughout the admin — the sidebar menu icon adapts to your admin colour scheme, and the mark replaces the generic placeholder icon in the topbar, form builder, Reports, and the empty Forms state.
* New: A dismissible “BoldForm Pro is launching soon!” early-access notice links administrators to the launch waitlist; once dismissed it stays hidden per user.

Privacy:
* Privacy: A personal-data exporter and eraser are registered with WordPress’s privacy tools, keyed on the submitter’s email address, so site owners can fulfil data export and erasure requests for form entries.
* Privacy: readme now documents what data is stored, how long it is kept, and how to export or erase it.
* Privacy: Optional, opt-in usage telemetry via the Appsero SDK — nothing is collected unless an administrator explicitly agrees through the admin notice (see the Privacy section above).

Security:
* Security: Integration API keys (Mailchimp, Brevo) are never written into page HTML; the builder receives only the connection id, name, type, and status, and the stored key is preserved when the field is left blank.
* Security: File uploads are re-validated on the server — SVG/SVGZ files are rejected, the size cap is enforced against the real on-disk bytes, and an explicit MIME allowlist is verified instead of trusting the filename.
* Security: Stronger SVG sanitization now strips <a>, <style>, SMIL animation tags, and namespaced href attributes, failing closed on files that cannot be parsed.
* Security: Settings import drops uninstall flags, all SMTP fields, and any key, secret, or password values before merging an uploaded file.
* Security: Form save sanitizes every field and option by type, de-duplicates field IDs, and caps the number of rows, columns, fields, and options.
* Security: Integrations dispatch only to explicitly active connections, and a connection with no API key can no longer be enabled.
* Security: The Mailchimp list ID is constrained to its expected grammar before use (SSRF hardening), and the settings option no longer autoloads SMTP passwords and captcha secret keys on every page.
* Security: Database errors are only surfaced when WP_DEBUG is enabled, so production never leaks raw SQL details.

Accessibility:
* Accessibility: Star-rating fields are fully keyboard and screen-reader operable (radiogroup, roving tabindex, arrow/Home/End/Space/Enter, per-star labels, visible focus ring).
* Accessibility: The custom dropdown supports in-listbox keyboard navigation (Arrow/Home/End/Enter/Escape) with an active-option highlight.
* Accessibility: On submit, validation errors are announced and associated with their fields (aria-invalid, aria-describedby, role=”alert”), and focus moves to the first invalid field; choice and name groups gain role=”group” with proper labelling.
* Accessibility: The builder announces row and field add/delete/duplicate actions to screen readers.

Performance:
* Performance: CSV export now streams in bounded batches instead of loading every entry into memory, so large exports no longer risk a memory spike (the output is identical).
* Performance: Each form is loaded once per request, so embedding the same form multiple times on a page no longer repeats the query.

Improvements:
* Improve: The forms list now matches WordPress-native list tables, with sortable column headers, a synced select-all checkbox, and native-styled bulk and filter controls.
* Improve: Builder canvas polish — clearer field hover and selected states, an accordion Style tab, a full-width Settings tab, a topbar that reflows before overlapping on narrow screens, and an improved shortcode copy button.
* Improve: An editing overlay now covers the canvas while the builder loads an existing form, so it no longer flashes the empty “Start building” placeholder.
* Improve: Conditional Logic condition rows wrap cleanly on narrow builder panels and small screens.
* Improve: The field library is drag-only — fields clone onto the canvas and the palette is never a drop target.
* Improve: Slider, star-rating, and field styling now follow the form’s design theme; star rating defaults to a consistent size.
* Improve: Refreshed the Forms admin screen — the action notice (“Form moved to trash”, etc.) is now a modern alert in the page header, the empty state has a styled “Add New Form” button, the top spacing is tightened, and the form builder sits flush with no left gap.
* Improve: Builder drag-and-drop now auto-scrolls the canvas while you drag a row or field toward the top or bottom edge, so drop targets below the fold are reachable on small screens; the row and field move handles also show a grab cursor.
* Improve: The form Preview screen header is now a single toolbar with an Exit button, a “Form Preview” title, and a click-to-copy shortcode pill, and the Choose Column Layout dialog was redesigned with guided layout cards and clearer hover/focus states.
* Improve: Style-tab numeric controls no longer overlap the unit suffix with the spinner arrows; Padding, Margin, and Border-Radius gained a visible stepper, and size and spacing fields show a meaningful placeholder (“Default” or “—”) instead of a misleading “0”.
* Improve: The colour reset button now stays disabled until a colour is changed, so it is clear when a value differs from the default.
* Improve: BoldForm admin screens now show only BoldForm’s own notices — promotional banners from other plugins or the active theme are suppressed on our screens.
* Improve: Star Rating is now styled per field — Number of Stars, Icon Size, Star Color (resting), and Active Color (hover/selected) live in the field’s own settings; the global Star Rating section was removed from the Style tab. Placeholder and Default Value remain hidden as they do not apply.
* Improve: Each field type now starts with a sensible default placeholder (e.g. “you@example.com” for email, “https://example.com” for URL) shown consistently on the canvas, preview, and front end; it can be edited or cleared per field.
* Improve: Renamed every admin-visible “Bold Form” to “BoldForm” for consistent product branding.
* Improve: Moved the Integrations submenu directly above Help & Support in the BoldForm admin menu.
* Improve: Balanced the Entries list-table column widths so the Submission column no longer crowds the Form, Date, and Status columns.

Fixes:
* Fix: Forms are no longer submitted for real when rendered in an editor or preview — the Gutenberg block preview, the Elementor editor, and the admin Preview Form screen.
* Fix: Numeric min/max/step bounds and dual-slider ranges are now enforced on the server, not just shown as input hints.
* Fix: A required dropdown no longer silently submits its first option; an empty placeholder option is emitted and empty required selects are rejected server-side.
* Fix: Forms embedded more than once on a page now get unique element IDs, so labels and widgets target the correct instance.
* Fix: Checkbox, radio, and dropdown selected states now follow the form’s design-theme colour instead of always showing the default teal.
* Fix: Each field’s configured maximum file size is honoured instead of a fixed 2 MB cap, and rich-content fields render their formatting correctly.
* Fix: Mailchimp contacts are upserted (PUT) instead of POSTed, resolving the “Member Exists” error on repeat submissions.
* Fix: Removed the non-functional Brevo “Tags” field and pre-select the form’s email field when a connection is assigned.
* Fix: Restored the boldform_field_library filter so add-ons can register custom field types again.
* Fix: Email fields are validated with is_email(), duplicate-entry detection honours each field’s own ID, and client-side conditional-logic operators match the server evaluator exactly.
* Fix: The BoldForm block inspector now shows only Form Settings; the duplicate Container, Layout, Labels, Input, Button, and Error style panels (already covered by the builder’s Style tab) were removed.
* Fix: The BoldForm block form preview keeps its styling when Hide Labels or Hide Placeholders is enabled.
* Fix: Admin topbar CSS now loads correctly on the Help & Support page, and the topbar wraps correctly when many nav items are present.
* Fix: Elementor widget cleanup — removed duplicate/dead controls, fixed focus-state label colours not applying, made the Checkbox/Radio Size control work against the visible field, and converted the Terms checkbox radius to a per-corner control.
* Fix: A row can no longer be dropped below the Submit or Add Row buttons in the builder canvas.
* Fix: Removed a leading gap before left- and right-aligned field labels in both the builder and the front-end form.
* Fix: Removed a duplicate “Add Row” panel-header button and a stray file-input sample from the Style-tab live preview.
* Fix: The Star Rating “Number of Stars” control no longer loses keyboard focus after each spinner/arrow-key increment.

Compatibility:
* Update: Tested up to WordPress 7.0; minimum supported version is now WordPress 6.3.
* Update: The Gutenberg block was upgraded to Block API version 3 for the WordPress 6.3+ iframed editor, and its in-editor preview is now styled.

Developer:
* Dev: New boldform_integration_dispatched action fires after each integration dispatch with the integration type, connection ID, the API response (array or WP_Error), and the entry ID.
* Dev: Lifecycle cleanup — the integration-dispatch cron is cleared on deactivation, and stored connections plus migration flags are removed on opted-in uninstall.

1.0.2

• Improve: Rewrote the readme with the full feature list, integration documentation, and a “Pro coming soon” section.
• Improve: Minor admin and Elementor widget polish. Documentation and packaging maintenance release — no changes to form rendering or submission behaviour.

1.0.1

• Fix: Buttons now include an accessible aria-label so screen readers announce the button text correctly.
• Fix: Select fields now include aria-label, aria-haspopup, and aria-controls attributes for full WCAG compliance.
• Fix: Native select element is correctly hidden when the custom dropdown is active, eliminating the duplicate-box display bug.
• Fix: Version constant updated to match plugin header, resolving asset versioning and remote file loading issues.
• Add: Separate Button Margin control in Elementor targeting the button element directly.
• Add: Restored missing Elementor widget settings for Section Break and Terms & Conditions sections.

1.0.0

• Initial release.