| @@ -2,11 +2,11 @@ | ||
| 2 | 2 | Contributors: forge12 |
| 3 | 3 | Donate link: https://www.paypal.com/donate?hosted_button_id=MGZTVZH3L5L2G |
| 4 | 4 | Tags: contact form 7, double opt-in, gdpr, email verification, newsletter |
| 5 | 5 | Requires at least: 6.0 |
| 6 | -Tested up to: 7.0 | |
| 6 | +Tested up to: 7.1 | |
| 7 | 7 | Requires PHP: 7.4 |
| 8 | -Stable tag: 5.7.0 | |
| 8 | +Stable tag: 5.8.1 | |
| 9 | 9 | License: GPLv3 |
| 10 | 10 | License URI: http://www.gnu.org/licenses/gpl-3.0.html |
| 11 | 11 | |
| 12 | 12 | **Protect your Contact Form 7 forms with GDPR-compliant Double Opt-In.** |
| @@ -25,8 +25,9 @@ | ||
| 25 | 25 | |
| 26 | 26 | * Only **valid, verified email addresses** reach your inbox. |
| 27 | 27 | * **GDPR / DSGVO requirements** are met with proper consent tracking, IP logging, and data retention. |
| 28 | 28 | * Your database stays **clean and reliable** -- no fake or mistyped addresses. |
| 29 | +* The form mail **arrives after the confirmation** -- every action that runs after the click is recorded, and temporary failures are retried automatically. | |
| 29 | 30 | |
| 30 | 31 | Out-of-the-box support for **Contact Form 7**. Additional form systems — Avada, Elementor, Gravity Forms, WPForms — are available as separate addon plugins. |
| 31 | 32 | |
| 32 | 33 | = How It Works = |
| @@ -38,8 +39,10 @@ | ||
| 38 | 39 | 5. The confirmed opt-in is logged in the admin dashboard with timestamps and IP addresses for full GDPR compliance. |
| 39 | 40 | |
| 40 | 41 | = Quick Start = |
| 41 | 42 | |
| 43 | +After activation, a setup wizard asks for the sender, the forms that should ask for confirmation, the confirmation email and the page visitors see after the click. Everything is prefilled; it takes about three minutes and can be skipped. | |
| 44 | + | |
| 42 | 45 | [Read the Quick Guide](https://www.forge12.com/blog/so-verwendest-du-das-double-opt-in-fuer-contact-form-7/) |
| 43 | 46 | |
| 44 | 47 | = Free Features = |
| 45 | 48 | |
| @@ -62,9 +65,9 @@ | ||
| 62 | 65 | * **Category System** -- organize opt-ins into categories for better management |
| 63 | 66 | * **Pagination & Search** -- search and filter opt-in records in the admin dashboard |
| 64 | 67 | * **Admin Tooltips** -- contextual help tooltips throughout the admin interface |
| 65 | 68 | * **WordPress Multisite** -- network-wide activation creates tables on all sites automatically |
| 66 | -* **Developer Hooks** -- 44 action hooks, 74 filters, and 11 typed events for full extensibility | |
| 69 | +* **Developer Hooks** -- 48 action hooks, 82 filters, and 13 typed events for full extensibility | |
| 67 | 70 | |
| 68 | 71 | = Pro Features = |
| 69 | 72 | |
| 70 | 73 | Unlock the full potential of Double Opt-In with the [Pro version](https://www.forge12.com/shop/contact-form-7-double-opt-in?from=readme&utm_source=double-opt-in&utm_medium=plugin&utm_campaign=readme): |
| @@ -141,8 +144,20 @@ | ||
| 141 | 144 | = Is this plugin GDPR / DSGVO compliant? = |
| 142 | 145 | |
| 143 | 146 | Yes. The plugin tracks all data required for GDPR compliance: consent text, registration and confirmation timestamps, IP addresses, and form data. It integrates with WordPress Privacy Tools for personal data export and erasure requests. You can configure automatic data retention and anonymization policies. |
| 144 | 147 | |
| 148 | += Is double opt-in mandatory? = | |
| 149 | + | |
| 150 | +For newsletters and other advertising emails in Germany, practically yes: the sender has to prove consent, and without the confirmation click that proof rarely holds up. No law names the procedure, but courts and data protection authorities expect it. This is general information, not legal advice. [More on the legal situation](https://www.forge12.com/de/blog/double-opt-in-wordpress-pflicht-rechtslage) | |
| 151 | + | |
| 152 | += Do I need double opt-in for a contact form? = | |
| 153 | + | |
| 154 | +A plain contact request does not need a consent checkbox or double opt-in. It becomes necessary as soon as the form also signs people up for a newsletter or other advertising. You can switch double opt-in on per form, or only when a checkbox is ticked (see "Conditions" below). | |
| 155 | + | |
| 156 | += What about Switzerland and Austria? = | |
| 157 | + | |
| 158 | +Advertising emails need prior consent there as well, and the sender has to be able to prove it. Double opt-in is the common way to do that, even where the law does not name it. | |
| 159 | + | |
| 145 | 160 | = Which form plugins are supported? = |
| 146 | 161 | |
| 147 | 162 | The free Core plugin supports **Contact Form 7** out of the box. Support for **Avada Forms**, **Elementor Pro Forms**, **WPForms**, and **Gravity Forms** is available through separate paid addon plugins (install alongside Core). |
| 148 | 163 | |
| @@ -161,8 +176,18 @@ | ||
| 161 | 176 | = Can I redirect the user to a specific page after confirmation? = |
| 162 | 177 | |
| 163 | 178 | Yes. In the per-form settings, you can select a **Confirmation Page**. The user will be redirected there after clicking the confirmation link. |
| 164 | 179 | |
| 180 | += How do I show the right message on the confirmation and error pages? = | |
| 181 | + | |
| 182 | +Put these shortcodes on the page: | |
| 183 | + | |
| 184 | +* `[doi_confirmation_status]` says whether the link just confirmed the address, was already used, has expired or is invalid. Each text can be replaced, for example `[doi_confirmation_status confirmed="Welcome aboard!"]`. | |
| 185 | +* `[doi_field name="your-name"]` shows a value from the form, only right after the confirmation. | |
| 186 | +* `[doi_error_message]` on the error page explains why a sign-up was refused (too many attempts, address already signed up, and so on). | |
| 187 | + | |
| 188 | +A page without `[doi_confirmation_status]` still shows a short notice when the link has expired or is invalid. | |
| 189 | + | |
| 165 | 190 | = Does the plugin work with CAPTCHA plugins? = |
| 166 | 191 | |
| 167 | 192 | Yes. The plugin automatically disables CAPTCHA validation (Google reCAPTCHA, hCaptcha, CF7 Captcha by Forge12) when re-sending the original form mail after confirmation. This prevents false spam detections during the confirmation step. CAPTCHA is re-enabled immediately after the mail has been sent. |
| 168 | 193 | |
| @@ -191,9 +216,9 @@ | ||
| 191 | 216 | The free version requires at least one supported form plugin. However, developers can register custom form integrations using the `f12_cf7_doubleoptin_register_integrations` action hook. See the developer documentation for details. |
| 192 | 217 | |
| 193 | 218 | = Where can I find the developer documentation? = |
| 194 | 219 | |
| 195 | -A hook, filter, and event reference with code examples ships at `docs/hooks-and-events.md` inside the plugin directory. It documents 27 of the 44 action hooks, 22 of the 74 filters, and all 11 typed events — the ones extensions actually reach for. The rest are discoverable in the source; if you need one documented, ask and we will add it. | |
| 220 | +A hook, filter, and event reference with code examples ships at `docs/hooks-and-events.md` inside the plugin directory. It documents 29 of the 48 action hooks, 24 of the 82 filters, and all 13 typed events — the ones extensions actually reach for. The rest are discoverable in the source; if you need one documented, ask and we will add it. | |
| 196 | 221 | |
| 197 | 222 | = How do I report a bug or request a feature? = |
| 198 | 223 | |
| 199 | 224 | Please visit [forge12.com](https://www.forge12.com) or contact us via the WordPress support forum. |
| @@ -238,8 +263,14 @@ | ||
| 238 | 263 | licensed under the SIL Open Font License 1.1 (see licenses/inter-OFL-1.1.txt). |
| 239 | 264 | |
| 240 | 265 | == Upgrade Notice == |
| 241 | 266 | |
| 267 | += 5.8.1 = | |
| 268 | +Fixes German admin texts. No functional changes. | |
| 269 | + | |
| 270 | += 5.8.0 = | |
| 271 | +Shows whether each confirmation email reached your mail server and tells Contact Form 7 visitors to confirm their address. Pro users: update the email editor and opt-out add-ons too. | |
| 272 | + | |
| 242 | 273 | = 5.7.0 = |
| 243 | 274 | Adds a setup wizard for new installations. Existing forms and settings are not changed. |
| 244 | 275 | |
| 245 | 276 | = 5.6.3 = |
| @@ -337,8 +368,32 @@ | ||
| 337 | 368 | = 3.1.0 = |
| 338 | 369 | Adds optional anonymous telemetry (opt-out). No breaking changes. |
| 339 | 370 | |
| 340 | 371 | == Changelog == |
| 372 | + | |
| 373 | += 5.8.1 = | |
| 374 | +* Fix: on sites in formal German (Sie), a sentence on the user creation page was shown in English, and the role appeared as its internal key ("subscriber") instead of its name. | |
| 375 | +* Fix: German admin texts used the English names "Conditional Templates", "User Creation" and "Unique Email"; they now use the German terms throughout. | |
| 376 | +* Fix: the breadcrumb on add-on settings pages read "Page". | |
| 377 | + | |
| 378 | += 5.8.0 = | |
| 379 | + | |
| 380 | +**Know whether the confirmation email went out** | |
| 381 | + | |
| 382 | +* New: every opt-in records whether its confirmation email was handed to your mail server or failed, and why. Shown in the opt-in list (with a filter), on the detail page and in Site Health; included in the WordPress privacy export and eraser. | |
| 383 | +* New: after a Contact Form 7 submission, visitors read "please confirm your address" with the sender and subject to look for, instead of "Thank you for your message". When the email could not be sent, they are told so. | |
| 384 | +* New: Site Health checks SPF and DMARC of the sender domain, the two most common reasons confirmation emails land in spam. | |
| 385 | +* New: a dashboard hint when many recent opt-ins stay unconfirmed. | |
| 386 | +* New: shortcodes [doi_confirmation_status], [doi_error_message] and [doi_field] for the confirmation and error pages, and a readable message when a link is broken or expired. | |
| 387 | +* New: a hidden honeypot field and a minimum fill time keep simple bots away from Contact Form 7 double opt-in forms. | |
| 388 | +* New: the forms page suggests add-ons only for form plugins that are installed on the site. | |
| 389 | +* New: after ten confirmations, a one-time request for a review, only on the plugin's own pages. | |
| 390 | +* Changed: the free plugin no longer contains locked Pro features. Email template management and the opt-out page generator now live in their add-ons. If you use them, update the email editor add-on to 1.1.0 and the opt-out add-on to 1.5.0; Site Health reminds you. | |
| 391 | +* Changed: a renewed consent after an opt-out no longer overwrites the original confirmation; it gets its own entry in the audit log. | |
| 392 | +* Fix: the Activate button on the Add-ons page and links in REST responses were broken ("&" in the URL). | |
| 393 | +* Fix: Avada forms without a notification were reported as a failed follow-up action. | |
| 394 | +* Fix: several admin texts stayed English on translated sites; the breadcrumb read "Page" on detail pages; a waiting button now shows a countdown. | |
| 395 | +* Developers: Core API 4.6.0 with the filters f12_doi_submit_notice_data and f12_doi_mail_headers, the events f12_doi_optin_opted_out and f12_doi_optin_reopted_in, follow-up adapters for add-ons and a shared resend service. | |
| 341 | 396 | |
| 342 | 397 | = 5.7.0 = |
| 343 | 398 | |
| 344 | 399 | **A setup wizard gets new sites to the first working confirmation email** |
