Onlinefotka SMTP Mail

Description

Onlinefotka SMTP Mail sends every WordPress and WooCommerce email through your own SMTP server instead of the unreliable PHP mail() function – so order confirmations, invoices and password resets reach the inbox, not the spam folder.

Everything is included for free – no “Pro” version, no license key.

Sending

• Any SMTP server – your hosting mailbox, Gmail / Google Workspace, Microsoft 365, Zoho, Seznam, Brevo, Mailgun, SendGrid, Postmark, Amazon SES, SMTP2GO…
• OAuth 2.0 login (no password stored) – Google / Gmail / Workspace (Gmail API), Microsoft 365 / Outlook.com (Microsoft Graph – no SMTP AUTH needed) and Zoho Mail (Zoho Mail API). You use your own app (client ID + secret), step-by-step setup guide included, tokens are stored encrypted and refreshed automatically
• Presets fill in host, port and encryption with one click
• Multiple connections (up to 10)
• Backup connection – when the primary server fails (outage, wrong password, limit reached) the email is immediately sent through the backup connection
• Smart routing – rules send selected emails through another connection, e.g. by subject, recipient, From address, custom header or the plugin that sent the email
• From email and name – optionally forced for every email, Return-Path set automatically
• Background sending – emails are queued and sent every minute with a limit per minute (respects hosting limits, faster checkout)
• “Do not send” mode for staging copies – emails are only logged

Email log

• Every email with status (sent / failed / blocked), recipient, subject, connection, error message and the plugin that sent it
• Safe preview of the HTML content, headers and attachments
• Resend to the original recipients or to another address, bulk resend
• Optional copies of attachments in a protected folder
• Filters (status, source, connection, date), search, CSV export
• Automatic cleanup after a chosen number of days

Tracking & reports

• Open and click tracking for HTML emails (signed redirect links – no open redirect)
• Reports – daily chart, totals, open and click rate, statistics by plugin and by connection
• Weekly summary email
• Dashboard widget

Alerts

Get notified when an email cannot be sent: email, Slack, Discord, Telegram or a custom webhook (JSON). Alerts are throttled and sent in the background.

Email controls

Turn off WordPress system emails you do not need – comment notifications, new user emails, password / email change notifications, automatic update emails.

Tools

• Test email with the complete SMTP conversation (passwords hidden) and plain-language advice for common errors
• Connection check – connect and log in without sending an email
• Domain check – MX, SPF, DKIM and DMARC records with advice
• Import from WP Mail SMTP including the password
• wp-config.php constants – ideal for agencies managing many sites, passwords never stored in the database
• WP-CLI: wp ofsm test, wp ofsm queue, wp ofsm log, wp ofsm stats, wp ofsm resend, wp ofsm report

Security

• Passwords are encrypted (libsodium) with a key derived from your wp-config.php salts – never stored next to the encrypted value
• Passwords are hidden in the SMTP conversation
• Capability checks and nonces on every action, all output escaped
• Email previews are rendered in a sandboxed iframe
• Stored attachments are protected from direct access and downloaded only by administrators
• CSV export is protected against formula injection

Privacy

The email log stores recipients and (optionally) the content of emails in your own database. Open and click tracking processes personal data – mention it in your privacy policy or keep it turned off. No data is sent to Onlinefotka or any third party; alerts are sent only to the channels you configure.

External services

The plugin connects to third-party services only when you configure them:

• Google Gmail API and Google OAuth (accounts.google.com, oauth2.googleapis.com, gmail.googleapis.com) – used when a connection of the type “Google” is set up: to authorize your mailbox and to send each email (recipients, subject, content and attachments are sent to Google). Terms, Privacy
• Microsoft identity platform and Microsoft Graph (login.microsoftonline.com, graph.microsoft.com) – used for connections of the type “Microsoft 365 / Outlook” to authorize the mailbox and send each email. Terms, Privacy
• Zoho Accounts and Zoho Mail API (accounts.zoho.*, mail.zoho.*) – used for connections of the type “Zoho Mail” to authorize the mailbox and send each email (attachments are uploaded to Zoho). Terms, Privacy
• Your SMTP server – for SMTP connections the emails are delivered to the SMTP server you enter.
• Slack, Discord, Telegram or your own webhook URL – only if you enter them as alert channels: when an email fails, the site name, subject, recipient and error message are sent there. Slack: Terms, Privacy; Discord: Terms, Privacy; Telegram: Terms, Privacy

The domain check in Tools only performs DNS lookups of the domain you enter. No data is ever sent to Onlinefotka.