Title: FOBO Data Maker Forms Author: chivantiebosch Published: July 29, 2026 Last modified: July 29, 2026 --- Search plugins ![](https://ps.w.org/fobo-data-maker-forms/assets/banner-772x250.png?rev=3627468) ![](https://ps.w.org/fobo-data-maker-forms/assets/icon-256x256.png?rev=3627468) # FOBO Data Maker Forms By [chivantiebosch](https://profiles.wordpress.org/chivantiebosch/) [Download](https://downloads.wordpress.org/plugin/fobo-data-maker-forms.1.0.0.zip) * [Details](https://wordpress.org/plugins/fobo-data-maker-forms/#description) * [Reviews](https://wordpress.org/plugins/fobo-data-maker-forms/#reviews) * [Installation](https://wordpress.org/plugins/fobo-data-maker-forms/#installation) * [Development](https://wordpress.org/plugins/fobo-data-maker-forms/#developers) [Support](https://wordpress.org/support/plugin/fobo-data-maker-forms/) ## Description The FOBO Data Maker Forms plugin lets you host Data Maker forms on a WordPress site. Upload a signed `.dmf` bundle, paste the shortcode onto any page, and submissions are sealed against the form’s recipient pubkey and forwarded to the Data Maker API. Features: * Full parity with the desktop renderer for the v1 column set: text, number, date, choice, multi-choice, checkbox, attachment, image, divider, spacer, group, rich- text, heading, button. * Pre-compiled VisibleWhen / CalculatedExpression / ValidationRule expressions ship with the .dmf, so cascade fires entirely in the browser — no server round- trip per keystroke. * libsodium-backed sealed submissions; the WP server never sees plaintext values once they leave the browser. * Optional browser-localStorage edit flow lets submitters return and amend their previous submission via a one-time edit token. * Theme switch: use the form’s own Data Maker palette, or inherit the active WordPress theme. Out of scope for v1: multi-step (Steps), signature/initials fields, relation fields, charts, nested record entry. ### Requirements * PHP 8.1+ with the `sodium` extension (default in PHP 7.2+). * The `zip` extension. * HTTPS on the WordPress site is strongly recommended. ### External services This plugin relies on the following third-party services. No data is sent to any of them until a visitor submits a form, or until an administrator turns on the optional Turnstile feature. **Data Maker API** (`https://datamaker-api.fobo-tools.com`) The form’s destination. When a visitor submits a form, the plugin seals (end-to-end encrypts) the submitted values against the form publisher’s public key in the browser and POSTs the sealed blob plus minimal metadata (the form id, schema version, and a submission timestamp) to this endpoint, which routes it to the form’s publisher. The WordPress server never sees the plaintext field values. File attachments are encrypted in the browser and PUT directly to the publisher’s storage via a short-lived upload slot issued by this API. This service is operated by FOBO Tools. Terms: https://fobo-tools.com/ terms — Privacy: https://fobo-tools.com/privacy **Cloudflare Turnstile** (`https://challenges.cloudflare.com`) A privacy-friendly CAPTCHA, used only on forms where an administrator has enabled the per-form Turnstile toggle. When enabled, the visitor’s browser loads Cloudflare’s widget script and obtains a challenge token; that token is sent with the submission and verified server- side against Cloudflare’s `siteverify` endpoint before the submission is sealed. No form field values are sent to Cloudflare. This service is operated by Cloudflare, Inc. Terms: https://www.cloudflare.com/website-terms/ — Privacy: https://www.cloudflare. com/privacypolicy/ ### Content Security Policy The renderer evaluates pre-compiled VisibleWhen / Calculated / Validation expressions on the client at every keystroke. The compiled bodies are plain JavaScript and run via `Function(...)` constructor, which a strict `Content-Security-Policy: script- src 'self'` header rejects. If the host site ships a CSP header, allow: * `script-src 'self' 'unsafe-eval'` — to permit the compiled expression evaluator. * `script-src 'self' https://challenges.cloudflare.com` — if the per-form Turnstile toggle is on (Cloudflare’s widget loads from this origin). * `connect-src 'self' https://datamaker-api.fobo-tools.com https://challenges.cloudflare. com` — for the sealed submit endpoint and the Turnstile siteverify call. * `frame-src https://challenges.cloudflare.com` — for the Turnstile iframe. Sites that cannot grant `'unsafe-eval'` can still upload forms with no VisibleWhen/ Calculated / per-field Validation expressions; static layouts work without the expression evaluator running. ### Source code and build This plugin ships its complete, human-readable source. The minified files under ` assets/dist/` are build artifacts only — their unminified sources sit beside them and are what you edit: * `assets/renderer.js` builds `assets/dist/renderer.min.js` * `assets/fn.js` builds `assets/dist/fn.min.js` * `assets/wp-bridge.js` builds `assets/dist/wp-bridge.min.js` * `assets/styles.css` builds `assets/dist/styles.min.css` * `assets/layout.css` builds `assets/dist/layout.min.css` Regenerate them with `make minify`, which runs Terser 5.36.0 and csso-cli 4.0.2 — both versions pinned in the bundled `Makefile`. ### Third-party libraries * **Font Awesome 5 Free (Solid)** — `assets/fa-solid-900.ttf`, drives the glyph controls. Font licensed under SIL OFL 1.1; icons and CSS under MIT. https://fontawesome. com — source: https://github.com/FortAwesome/Font-Awesome * **libsodium** — used through PHP’s bundled `sodium` extension (PHP 7.2+). No library code is shipped with the plugin. ### Local development A Docker harness ships in `docker-compose.yml` (WordPress 6.7 + PHP 8.2 + MariaDB 11) with the plugin folder bind-mounted into `wp-content/plugins/fobo-data-maker- forms/`. ``` make up # start WP on http://localhost:8089 make wp-install # one-shot scripted install + activate (admin/admin) make logs # tail WordPress error log make down # stop containers make down ARGS=-v # stop + nuke volumes ``` PHP edits are picked up immediately. JS/CSS edits to assets/ are too — refresh the page in the browser. ## Screenshots [⌊A designer-themed RSVP form rendered on the front end, with a background image, custom fonts, and choice fields.⌉⌊A designer-themed RSVP form rendered on the front end, with a background image, custom fonts, and choice fields.⌉[ A designer-themed RSVP form rendered on the front end, with a background image, custom fonts, and choice fields. [⌊A petition form with a signature pad and a Markdown-enabled comments field.⌉⌊A petition form with a signature pad and a Markdown-enabled comments field.⌉[ A petition form with a signature pad and a Markdown-enabled comments field. [⌊The Forms admin screen: every uploaded .dmf listed with its shortcode, signing status, and upload date.⌉⌊The Forms admin screen: every uploaded .dmf listed with its shortcode, signing status, and upload date.⌉[ The Forms admin screen: every uploaded .dmf listed with its shortcode, signing status, and upload date. [⌊Uploading a signed .dmf bundle and giving it a shortcode slug.⌉⌊Uploading a signed. dmf bundle and giving it a shortcode slug.⌉[ Uploading a signed .dmf bundle and giving it a shortcode slug. ## Blocks This plugin provides 1 block. * FOBO Data Maker Form ## Installation 1. Upload the `fobo-data-maker-forms` folder to `/wp-content/plugins/`. 2. Activate the plugin under **Plugins**. 3. Configure the **Data Maker API URL** under **FOBO Data Maker Forms Settings**. 4. Upload a `.dmf` bundle under **FOBO Data Maker Forms Upload .dmf** with a slug. 5. Embed in a page: `[fobo_data_maker_form id="your-slug"]`. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “FOBO Data Maker Forms” is open source software. The following people have contributed to this plugin. Contributors * [ chivantiebosch ](https://profiles.wordpress.org/chivantiebosch/) [Translate “FOBO Data Maker Forms” into your language.](https://translate.wordpress.org/projects/wp-plugins/fobo-data-maker-forms) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/fobo-data-maker-forms/), check out the [SVN repository](https://plugins.svn.wordpress.org/fobo-data-maker-forms/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/fobo-data-maker-forms/) by [RSS](https://plugins.trac.wordpress.org/log/fobo-data-maker-forms/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial public release. Reads .dmf envelope v3 (compiled.json + elementCss.json + palette.css extras). Sealed POST/PUT submissions. localStorage edit flow. ## Meta * Version **1.0.0** * Last updated **3 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.4 or higher ** * Tested up to **7.0.2** * PHP version ** 8.1 or higher ** * Tags * [forms](https://wordpress.org/plugins/tags/forms/)[renderer](https://wordpress.org/plugins/tags/renderer/) * [Advanced View](https://wordpress.org/plugins/fobo-data-maker-forms/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/fobo-data-maker-forms/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/fobo-data-maker-forms/reviews/) ## Contributors * [ chivantiebosch ](https://profiles.wordpress.org/chivantiebosch/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/fobo-data-maker-forms/)