Description
Secufor FSQL intercepts form submissions and writes them to one or more MySQL
databases of your choice, so that personal data collected through your forms
never has to sit in your WordPress installation.
Features:
- Works with Forminator, Formidable Forms, WPForms and Gravity Forms.
- Connect several external databases and route each form plugin to the ones you pick.
- Optionally keep a copy inside the WordPress database.
- Optionally delete the entries the form plugin stored on its own side.
- Export any connected database to CSV from the admin.
Connection credentials are encrypted at rest with AES-256-GCM, using a key
derived from your site’s WordPress salts.
External services
Every feature of this plugin runs locally and is available without an account.
The plugin contacts no external service on its own: the only requests it makes
are the ones you trigger yourself by submitting the optional account form.
If, and only if, you fill in that form, the plugin connects to secufor.net, the
service that hosts Secufor accounts, for two things:
- Logging in: the Secufor username and password you typed are sent to
https://secufor.net/wp-json/jwt-auth/v1/tokenin exchange for an access token. - Reading your profile, using that token, from
https://secufor.net/wp-json/wp/v2/users/me. The name and email address it returns are displayed on the account screen.
The account is informational only. Logging in unlocks nothing, and logging out
or never logging in disables nothing: the form modules, the database
connections, the exports and every setting behave identically either way.
No form submission and no database credential is ever sent to secufor.net.
Service provided by Secufor: terms of use, data protection.
Installation
- Upload the
secufor-fsqlfolder to/wp-content/plugins/, or install the plugin through the Plugins screen. - Activate the plugin through the Plugins screen.
- Go to Secufor FSQL > Database connection and add the MySQL database you want to write to.
- Open the screen of each form plugin you use and tick the databases that should receive its submissions.
FAQ
-
Which databases are supported?
-
MySQL and MariaDB. The plugin routes its queries through the WordPress database
layer, which only speaks MySQL. -
What happens to entries already stored by my form plugin?
-
Nothing, unless you tick “Delete the entries stored by the form plugin” on that
module’s screen. That action is irreversible. -
Do I need a Secufor account?
-
No. The plugin is fully functional without one. The account screen is purely
informational: it displays the name and email of a secufor.net account if you
choose to sign in, and no feature depends on it. -
Where are my database passwords stored?
-
In the WordPress options table, encrypted with AES-256-GCM. The key is derived
from the salts in yourwp-config.php, so a database dump alone does not reveal
them. If you regenerate your salts, you will need to re-enter the credentials.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Secufor FSQL” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Secufor FSQL” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.1
- Removed the remote installation check and every option derived from it. The
module screens and the database-connection screen are now always available,
independently of any network call. - Removed the remote deregistration call previously made on uninstall.
- Removed the subscription label from the account screen.
- The plugin no longer contacts any external service unless the user submits
the optional account form.
1.0.0
- First public release.
- Forminator, Formidable Forms, WPForms and Gravity Forms modules.
- Multiple external MySQL destinations per module.
- CSV export of a connected database.
- Encrypted storage of database credentials.