FOBO Data Maker Forms

Description

The FOBO Data Maker Forms plugin lets you host Data Maker forms on a WordPress site. Upload a signed .dmf bundle, paste the shortcode onto any page, and submissions are sealed against the form’s recipient pubkey and forwarded to the Data Maker API.

Features:

• Full parity with the desktop renderer for the v1 column set: text, number, date, choice, multi-choice, checkbox, attachment, image, divider, spacer, group, rich-text, heading, button.
• Pre-compiled VisibleWhen / CalculatedExpression / ValidationRule expressions ship with the .dmf, so cascade fires entirely in the browser — no server round-trip per keystroke.
• libsodium-backed sealed submissions; the WP server never sees plaintext values once they leave the browser.
• Optional browser-localStorage edit flow lets submitters return and amend their previous submission via a one-time edit token.
• Theme switch: use the form’s own Data Maker palette, or inherit the active WordPress theme.

Out of scope for v1: multi-step (Steps), signature/initials fields, relation fields, charts, nested record entry.

Requirements

• PHP 8.1+ with the sodium extension (default in PHP 7.2+).
• The zip extension.
• HTTPS on the WordPress site is strongly recommended.

External services

This plugin relies on the following third-party services. No data is sent to any of them until a visitor submits a form, or until an administrator turns on the optional Turnstile feature.

Data Maker API (https://datamaker-api.fobo-tools.com)
The form’s destination. When a visitor submits a form, the plugin seals (end-to-end encrypts) the submitted values against the form publisher’s public key in the browser and POSTs the sealed blob plus minimal metadata (the form id, schema version, and a submission timestamp) to this endpoint, which routes it to the form’s publisher. The WordPress server never sees the plaintext field values. File attachments are encrypted in the browser and PUT directly to the publisher’s storage via a short-lived upload slot issued by this API. This service is operated by FOBO Tools.
Terms: https://fobo-tools.com/terms — Privacy: https://fobo-tools.com/privacy

Cloudflare Turnstile (https://challenges.cloudflare.com)
A privacy-friendly CAPTCHA, used only on forms where an administrator has enabled the per-form Turnstile toggle. When enabled, the visitor’s browser loads Cloudflare’s widget script and obtains a challenge token; that token is sent with the submission and verified server-side against Cloudflare’s siteverify endpoint before the submission is sealed. No form field values are sent to Cloudflare. This service is operated by Cloudflare, Inc.
Terms: https://www.cloudflare.com/website-terms/ — Privacy: https://www.cloudflare.com/privacypolicy/

Content Security Policy

The renderer evaluates pre-compiled VisibleWhen / Calculated / Validation expressions on the client at every keystroke. The compiled bodies are plain JavaScript and run via Function(...) constructor, which a strict Content-Security-Policy: script-src 'self' header rejects.

If the host site ships a CSP header, allow:

• script-src 'self' 'unsafe-eval' — to permit the compiled expression evaluator.
• script-src 'self' https://challenges.cloudflare.com — if the per-form Turnstile toggle is on (Cloudflare’s widget loads from this origin).
• connect-src 'self' https://datamaker-api.fobo-tools.com https://challenges.cloudflare.com — for the sealed submit endpoint and the Turnstile siteverify call.
• frame-src https://challenges.cloudflare.com — for the Turnstile iframe.

Sites that cannot grant 'unsafe-eval' can still upload forms with no VisibleWhen / Calculated / per-field Validation expressions; static layouts work without the expression evaluator running.

Source code and build

This plugin ships its complete, human-readable source. The minified files under assets/dist/ are build artifacts only — their unminified sources sit beside them and are what you edit:

• assets/renderer.js builds assets/dist/renderer.min.js
• assets/fn.js builds assets/dist/fn.min.js
• assets/wp-bridge.js builds assets/dist/wp-bridge.min.js
• assets/styles.css builds assets/dist/styles.min.css
• assets/layout.css builds assets/dist/layout.min.css

Regenerate them with make minify, which runs Terser 5.36.0 and csso-cli 4.0.2 — both versions pinned in the bundled Makefile.

Third-party libraries

• Font Awesome 5 Free (Solid) — assets/fa-solid-900.ttf, drives the glyph controls. Font licensed under SIL OFL 1.1; icons and CSS under MIT. https://fontawesome.com — source: https://github.com/FortAwesome/Font-Awesome
• libsodium — used through PHP’s bundled sodium extension (PHP 7.2+). No library code is shipped with the plugin.

Local development

A Docker harness ships in docker-compose.yml (WordPress 6.7 + PHP 8.2 + MariaDB 11) with the plugin folder bind-mounted into wp-content/plugins/fobo-data-maker-forms/.

make up           # start WP on http://localhost:8089
make wp-install   # one-shot scripted install + activate (admin/admin)
make logs         # tail WordPress error log
make down         # stop containers
make down ARGS=-v # stop + nuke volumes

PHP edits are picked up immediately. JS/CSS edits to assets/ are too — refresh the page in the browser.