Title: PlugUpp Dynamic Attachments for Gravity Forms Author: PlugUpp Published: October 10, 2026 Last modified: October 10, 2026 --- Search plugins ![](https://ps.w.org/plugupp-dynamic-attachments-for-gravity-forms/assets/banner- 772x250.png?rev=3738504) ![](https://ps.w.org/plugupp-dynamic-attachments-for-gravity-forms/assets/icon.svg? rev=3738504) # PlugUpp Dynamic Attachments for Gravity Forms By [PlugUpp](https://profiles.wordpress.org/plugupp/) [Download](https://downloads.wordpress.org/plugin/plugupp-dynamic-attachments-for-gravity-forms.1.1.4.zip) * [Details](https://wordpress.org/plugins/plugupp-dynamic-attachments-for-gravity-forms/#description) * [Reviews](https://wordpress.org/plugins/plugupp-dynamic-attachments-for-gravity-forms/#reviews) * [Installation](https://wordpress.org/plugins/plugupp-dynamic-attachments-for-gravity-forms/#installation) * [Development](https://wordpress.org/plugins/plugupp-dynamic-attachments-for-gravity-forms/#developers) [Support](https://wordpress.org/support/plugin/plugupp-dynamic-attachments-for-gravity-forms/) ## Description Gravity Forms can attach the files a visitor uploads. It cannot attach a file you already have, such as a brochure, a price list or the guide a page is about. This plugin adds that, one notification at a time. The file you send can be private. A private file is not in the Media Library and the site never shows its web address. It exists to be emailed. Upload it in the Private files tab of the same window you pick Media Library files from. Requires Gravity Forms 2.5 or later, and 2.9 or later for the files from the page. No other plugin is needed. Open a notification and you will find an Additional attachments section at the end, with two switches. Turn on either or both. #### Private files Wherever you choose files, the media window has a third tab, Private files, beside Upload files and Media Library. Upload a file there and it goes into the plugin’s own store under your uploads folder. Each file sits alone in a folder with a long random name and keeps its own name, made safe for a server. WordPress’s own upload checks apply, so only the types your Media Library accepts can be uploaded. No Media Library entry is made and no address is shown anywhere. Each row shows a small preview, the file’s real name and a pill saying Private or Media Library. View opens a private file in a new tab through the plugin, for signed- in users who can upload files. Anyone else is turned away. The email carries the file under its real name. Private files are managed on the plugin’s tab under Forms, Settings. The list shows where each file is used, with links to those pages and notifications. Delete removes a file from the server and from every page and notification that uses it. Remove, on a page or a notification, only takes it off that one list. When you delete the plugin, its private files are deleted too, because nobody could open them without it. A switch on the same tab keeps the folder instead. #### Static attachments Turn on Static attachments and press Add files. Pick Media Library files, private files or both. Every send of that notification carries them. Any type the Media Library accepts can be attached, and nothing about your upload permissions changes. #### Attach the files from the page the form was on Each page, post or custom post type record gets an Email attachments box on its edit screen, in the block editor’s sidebar or the classic editor’s side column. Add one or more files there, from the Media Library or the private files. Put the form on the page and turn on the second switch in the notification. When someone sends the form, Gravity Forms saves the page they sent it from, and the notification attaches every file in that page’s box. One form and one notification can then deliver different files from every page it sits on. There is no hidden field and no merge tag to set up. You choose which post types show the box on the plugin’s tab under Forms, Settings. Posts and Pages are ticked until you change them. Static files and the files from the page work together on the same notification, and a file reached both ways is attached once. #### Held back, never sent short If any configured file cannot be prepared, that notification is not sent. The entry, the confirmation and every other notification carry on as normal. The entry gets a note saying which notification was held back, why, and how to fix it, and the reason is also written to Gravity Forms logging. A notification is never sent with a file missing, and a failure on the page’s files never falls back to the static files. The checks run at send time on the final email, after Gravity Forms has added any uploaded files and other plugins have added theirs: * The page must still exist, be published, have no password, and be a type that shows the Email attachments box. * Its box must hold at least one file. * Every file must be a real, readable file inside your uploads folder. A private file must still be in the plugin’s store. * The whole email must carry no more than 25 MiB of files. A developer can change that ceiling with the `dagf_max_total_bytes` filter. Submissions, delayed sends and resends from the entry screen all go through the same checks. A resend uses the page saved in the entry and the files that page holds today. #### Who it is for Sites that send a document when a form is filled in: a guide request, a brochure download, a booking with terms attached, a course with its handouts. ### External services The attachment features call no outside service. Files are read from your own uploads folder and sent through Gravity Forms’ normal sending. One screen makes a call to WordPress.org, described here in full. **The More from PlugUpp panel** On this plugin’s own tab under Forms, Settings, and nowhere else, your site asks the WordPress.org plugins API (`https://api.wordpress.org/plugins/info/1.2/`) for the list of plugins published by the PlugUpp account, once a day, and shows them as cards with their WordPress.org icons (served from `https://ps.w.org/`). The request carries the author name and nothing about your site, your forms or your entries. This is the same API WordPress itself uses for the Add New plugin screen and for update checks. If it cannot be reached, a short built-in list is shown instead. WordPress.org privacy policy: https://wordpress.org/about/privacy/ ## Screenshots [⌊The Additional attachments section of a notification, with static files and the files from the page turned on.⌉⌊The Additional attachments section of a notification, with static files and the files from the page turned on.⌉[ The Additional attachments section of a notification, with static files and the files from the page turned on. [⌊The Private files tab of the media window, where files are uploaded and picked without a web address.⌉⌊The Private files tab of the media window, where files are uploaded and picked without a web address.⌉[ The Private files tab of the media window, where files are uploaded and picked without a web address. [⌊The Email attachments panel in the block editor, with one Media Library file and two private files.⌉⌊The Email attachments panel in the block editor, with one Media Library file and two private files.⌉[ The Email attachments panel in the block editor, with one Media Library file and two private files. [⌊The Additional attachments tab under Forms, Settings, with the post types, the private files list and the uninstall switch.⌉⌊The Additional attachments tab under Forms, Settings, with the post types, the private files list and the uninstall switch .⌉[ The Additional attachments tab under Forms, Settings, with the post types, the private files list and the uninstall switch. [⌊An entry note explaining why a notification was held back and how to fix it.⌉⌊ An entry note explaining why a notification was held back and how to fix it.⌉[ An entry note explaining why a notification was held back and how to fix it. ## Installation 1. Install and activate Gravity Forms 2.5 or later. Use 2.9 or later to attach the files from the page the form was on. 2. Install and activate this plugin from Plugins, Add New, or upload the zip. 3. Go to Forms, Settings, Additional attachments and tick the post types that should show the Email attachments box. Posts and Pages are ticked to start with. 4. Open a form, go to Settings, then Notifications, and edit a notification. The Additional attachments section is at the end. ## FAQ ### Does it need any other plugin? Only Gravity Forms. The Email attachments box is the plugin’s own, so no field plugin or theme feature is involved. ### Can anyone download a private file? No address for a private file or its preview is ever published or shown. A file can only be reached by an address nobody is given. The file sits in a folder with a long random name. The plugin never prints that name on a screen, in its log, in an entry note or in an email. Nothing links to it, so a visitor or a search engine has nothing to follow, and the name is too long to guess. Opening the folders in a browser shows an empty page, never a list of files. The protection is that the address is unknown. A server rule is not involved, so it works the same on every host. If someone did learn a file’s full address, the file would download, which is why the plugin never discloses one. Signed-in users who can upload files open private files with View, which goes through the plugin. An emailed copy belongs to its recipient, like any attachment. Gravity Forms logging, when it is on, writes each email’s attachment list to its log. A private file appears there as a placeholder under its real name. The plugin puts the address back only at the last step, inside WordPress’s own mail function, so it never reaches Gravity Forms’ log. ### What name does a private file arrive under? Its own name. The file is stored under the name you uploaded, made safe for a server. Spaces become dashes and accents are dropped, so “Price list.pdf” is stored as “ Price-list.pdf”. On WordPress 6.2 and later, WordPress’s own mail sends the exact name you see in the list. Older WordPress, and some mail plugins such as Post SMTP, send the stored name instead, so the recipient may see the dashes. Either way it is the file’s own name, never a random one. ### Can a mail plugin log where a private file is stored? Yes. The plugin hands the file’s location to WordPress’s mail function at the last step, and the mail plugin needs it there to attach the file. Post SMTP, with its log level set to debug, writes the full path of each attachment to the PHP error log. That log belongs to your server, outside this plugin. Other mail plugins may do the same. Keep mail debug logging off on a live site, and keep the server’s error log private. ### What happens to private files when I delete the plugin? They are deleted with it, unless you turn off “Delete private files when the plugin is uninstalled” on the plugin’s tab under Forms, Settings. Without the plugin nobody can open or even name these files, so keeping them only makes sense if you plan to install it again. Keep your own copies of the originals. ### Where do the files from the page come from? From the Email attachments box on the page the form was sent from. Gravity Forms saves that page on every entry, on the server, when the form is sent. The form has to be on the page itself. An archive or a preview has no page, so a notification that needs one is held back. A form in a popup counts as sent from the page the popup opens on. ### Can a page send more than one file? Yes. Add as many files as you like to a page’s Email attachments box. They are sent in the order listed, and a notification is held back if any one of them cannot be prepared. ### Which file types can I attach? Any type your Media Library accepts. The plugin does not change what can be uploaded. Mail providers have their own rules, so test a new type with your provider. ### Is there a size limit? One email never carries more than 25 MiB of files, counted over every file before encoding. That includes files visitors upload and files other plugins attach. Encoding adds about a third to the size, and many mail providers accept less, so keep attachments well under it. There is no setting for it. A developer can change it with the `dagf_max_total_bytes` filter. ### Can a visitor get a file they should not have? Only published pages without a password, of the types you tick, can give files, and only the files in their Email attachments box are read. A visitor can still send a form from any published page, so the files of any such page can reach them. Anything you attach to a public form can reach anyone who fills it in, and an emailed copy cannot be recalled. Only attach files you are happy to send. ### Does it work with Prevent Direct Access? Yes. Media Library files are found by their attachment ID and their current location on the server, so a protected file is attached in the same way as any other. Private files need no protection plugin. Protecting a file’s web address does not make an emailed copy private. ### What happens if I deactivate the plugin? While it is inactive it cannot hold a notification back, so Gravity Forms sends notifications without these files. Turn the affected notifications off or change them first. The settings stay on each notification, each page keeps its chosen files, and the private files stay in their folder. They do nothing until the plugin is active again. ### What happens to my settings when I import a form on another site? The settings remember the site they were saved on. On a different site the notification is held back until you open it, check each file, and save it there. Attachment IDs differ between sites, so this stops the wrong file being sent. ### Does the plugin send anything to an outside service? Not your forms, entries or files. Attachments are prepared on your own server and sent through Gravity Forms’ normal sending. The one outside call is the More from PlugUpp panel on the plugin’s tab under Forms, Settings. Once a day it reads the list of PlugUpp plugins from WordPress.org, and it sends nothing about your site. External services above has the detail. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “PlugUpp Dynamic Attachments for Gravity Forms” is open source software. The following people have contributed to this plugin. Contributors * [ PlugUpp ](https://profiles.wordpress.org/plugupp/) [Translate “PlugUpp Dynamic Attachments for Gravity Forms” into your language.](https://translate.wordpress.org/projects/wp-plugins/plugupp-dynamic-attachments-for-gravity-forms) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/plugupp-dynamic-attachments-for-gravity-forms/), check out the [SVN repository](https://plugins.svn.wordpress.org/plugupp-dynamic-attachments-for-gravity-forms/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/plugupp-dynamic-attachments-for-gravity-forms/) by [RSS](https://plugins.trac.wordpress.org/log/plugupp-dynamic-attachments-for-gravity-forms/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.1.4 * Changed: The help in a notification’s Additional attachments section is one line, with the details behind its ? button. * Added: While “Attach the files from the page the form was on” is on, a line under it says how many published pages hold the form and whether their Email attachments boxes have files. * Changed: An empty file list says what Add files opens. * Changed: The plugin’s link in the Plugins list goes to its page on plugupp.com. #### 1.1.3 * Changed: The plugin’s link in the Plugins list goes to the documentation site. #### 1.1.2 * Changed: The Additional attachments tab under Forms, Settings has its own paper clip icon. #### 1.1.1 * Changed: The Private files tab now looks and works like the Media Library tab, with square tiles and a details sidebar for the selected file. * Added: Drop files anywhere on the media window to upload a private file while the Private files tab is open, or press Select files. * Changed: The file lists leave a gap above Add files, show View and Remove under each name, and wrap long file names. #### 1.1.0 * Added: Private files. Upload them in a Private files tab of the media window. They are not in the Media Library, and no web address is ever shown for them. * Added: A private file is emailed under its real name. * Added: View opens a private file through the plugin, for signed-in users who can upload files. * Added: Thumbnails on every file, and a Private or Media Library pill under each name. * Added: A list of private files on the plugin’s tab under Forms, Settings, with where each is used and Delete. * Added: Delete private files when the plugin is uninstalled, a switch that is on until you turn it off. * Changed: One file picker for the page box and the notification’s static files, with Add to page or Add to notification. * Changed: Deleting a Media Library file now also takes it off every notification’s static files. #### 1.0.0 * Added: Static attachments. Pick Media Library files for any Gravity Forms notification. * Added: An Email attachments box on the edit screen of the post types you choose, holding any number of Media Library files per page. * Added: Attach the files from the page the form was on, the page Gravity Forms saves on each entry. * Added: Two switches in each notification, one for each source. With both off the notification is left alone. * Added: Notifications whose files cannot be prepared are held back, with a note on the entry and a reason in Gravity Forms logging. * Added: A 25 MiB ceiling on the files in one email, checked against every file in the final email. * Added: A More from PlugUpp panel on the plugin’s tab under Forms, Settings, listing the other PlugUpp plugins from WordPress.org. ## Meta * Version **1.1.4** * Last updated **16 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Tags * [attachments](https://wordpress.org/plugins/tags/attachments/)[email](https://wordpress.org/plugins/tags/email/) [gravity forms](https://wordpress.org/plugins/tags/gravity-forms/)[media library](https://wordpress.org/plugins/tags/media-library/) [Notifications](https://wordpress.org/plugins/tags/notifications/) * [Advanced View](https://wordpress.org/plugins/plugupp-dynamic-attachments-for-gravity-forms/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/plugupp-dynamic-attachments-for-gravity-forms/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/plugupp-dynamic-attachments-for-gravity-forms/reviews/) ## Contributors * [ PlugUpp ](https://profiles.wordpress.org/plugupp/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/plugupp-dynamic-attachments-for-gravity-forms/)