Folderit Forms connects a WordPress site to a Folderit account. Administrators can import an existing Folderit e-form template or create a new template, choose a destination folder, customize the visitor experience, and publish the form with a Gutenberg block or shortcode.<\/p>\n\n
Each successful submission creates a Folderit data item. File fields use Folderit's staged upload process and are attached directly to the matching data item field. Folderit credentials remain on the WordPress server and are never sent to visitors.<\/p>\n\n
Features:<\/p>\n\n
[folderit_form id=\"123\"]<\/code> shortcode.<\/li>\n- Server-side validation, upload controls, rate limiting, duplicate protection, and a spam honeypot.<\/li>\n
- Optional administrator and visitor confirmation emails.<\/li>\n
- Privacy-conscious delivery activity without local form-value storage.<\/li>\n
- Accessible no-JavaScript submission fallback.<\/li>\n<\/ul>\n\n
External service<\/h4>\n\n
This plugin connects to Folderit, an external document management service, only after a WordPress administrator enters Folderit OAuth client credentials and chooses an account. When a visitor submits a published form, the entered field values and selected files are transferred to the chosen Folderit account. Authentication requests are sent to https:\/\/auth.folderit.com<\/code>, and API requests are sent to https:\/\/api.folderit.com<\/code>.<\/p>\n\nFolderit service information: https:\/\/www.folderit.com\/\nFolderit privacy policy: https:\/\/www.folderit.com\/privacy-policy\/\nFolderit terms of use: https:\/\/my.folderit.com\/files\/folderit-terms-of-use.pdf<\/p>\n\n
Privacy<\/h3>\n\n
The plugin adds suggested text to WordPress's privacy policy guide. Site owners are responsible for explaining what information their forms collect, why it is collected, and that it is transferred to Folderit. Folderit Forms does not provide legal compliance guarantees.<\/p>\n\n\n
\n- In Plugins > Add Plugin, search for Folderit Forms and select Install Now. Before the WordPress.org listing is approved, install the release ZIP through Plugins > Add Plugin > Upload Plugin.<\/li>\n
- Activate Folderit Forms.<\/li>\n
- Open Folderit Forms > Connection and enter OAuth client credentials.<\/li>\n
- Test the connection and choose the Folderit account.<\/li>\n
- Create a form, select its destination folder, and publish it.<\/li>\n
- Add the Folderit Form block to a page, or use the shortcode shown in the forms list.<\/li>\n<\/ol>\n\n
For stronger secret management, define FOLDERIT_FORMS_CLIENT_ID<\/code> and FOLDERIT_FORMS_CLIENT_SECRET<\/code> in wp-config.php<\/code>. Values defined there are not editable in WordPress.<\/p>\n\n\n\nAre submitted values stored in WordPress?<\/h3><\/dt>\nNo. By default, the plugin stores only delivery status, time, form ID, Folderit record UID, and a redacted operational message. Field values and files are sent to Folderit and are not retained in WordPress.<\/p><\/dd>\n
Can I use existing Folderit e-form templates?<\/h3><\/dt>\nYes. Choose \"Use existing\" in the form editor. The plugin imports the field structure while allowing local presentation changes.<\/p><\/dd>\n
Can WordPress create a Folderit template?<\/h3><\/dt>\nYes. Choose \"Create new\", add fields, and publish. The template is created in Folderit during publishing.<\/p><\/dd>\n
What happens if Folderit changes an imported template?<\/h3><\/dt>\nUse Refresh template in the editor. Required public-compatible fields remain visible, while compatible local labels and help text are preserved.<\/p><\/dd>\n
Can a public form contain a Folderit user field?<\/h3><\/dt>\nNo. Folderit user choices require a signed-in Folderit session, so user fields are identified in the editor but excluded from public forms. A template with a required user field cannot be published until that field is made optional or removed in Folderit.<\/p><\/dd>\n
How do visitor confirmation emails work?<\/h3><\/dt>\nAdd a regular Email field to the form and enable visitor confirmations under Behavior. The visitor enters their own address in that field, and the confirmation is sent there after successful delivery.<\/p><\/dd>\n
How are credentials protected?<\/h3><\/dt>\nCredentials are used only in server-side requests. Stored credentials are encrypted with authenticated encryption when supported by the host. Defining credentials in wp-config.php<\/code> provides the strongest storage option.<\/p><\/dd>\n\n<\/dl>\n\n\n0.1.7<\/h4>\n\n\n- Removed an unnecessary direct load of a WordPress administration include.<\/li>\n
- Made the signed, expiring public form token an explicit REST permission check while retaining validation inside submission processing.<\/li>\n
- Confirmed that all administrator request handlers require both the appropriate capability and WordPress nonce authentication.<\/li>\n<\/ul>\n\n
0.1.6<\/h4>\n\n\n- Excluded Folderit user fields from public forms and added clear editor, preview, and publishing guidance for incompatible required user fields.<\/li>\n
- Reloaded all available Folderit accounts on the Connection page so administrators can switch accounts later.<\/li>\n
- Replaced a successfully submitted public form with a clear success state and an optional \"Submit another response\" action.<\/li>\n
- Clarified visitor confirmation email setup and added a one-click visitor email field for WordPress-managed templates.<\/li>\n
- Corrected form-editor control alignment and expanded regression coverage for these workflows.<\/li>\n<\/ul>\n\n
0.1.5<\/h4>\n\n\n- Updated the plugin description, author link, and plugin information link.<\/li>\n
- Hardened required-field validation, form configuration limits, and upload integrity checks.<\/li>\n
- Preserved a working connection when replacement credentials fail testing and validated account choices against Folderit.<\/li>\n
- Removed obsolete credential-management REST endpoints and optional list parameters that can fail on some Folderit accounts.<\/li>\n
- Improved repeated fields, table rows, error accessibility, response handling, and form reset behavior.<\/li>\n<\/ul>\n\n
0.1.4<\/h4>\n\n\n- Simplified Folderit account discovery to avoid a server error from optional pagination and sorting parameters.<\/li>\n
- Distinguished saved credentials from a completed account connection in the admin status.<\/li>\n
- Clarified why the form editor remains locked until a Folderit account is selected.<\/li>\n
- Included Folderit HTTP status codes in API error messages.<\/li>\n<\/ul>\n\n
0.1.3<\/h4>\n\n\n- Replaced the connection AJAX request with a conventional WordPress admin-post settings flow.<\/li>\n
- Packaged connection fields into a neutral POST payload to avoid hosting firewall false positives.<\/li>\n
- Preserved connection feedback and Folderit account choices across the settings-page redirect.<\/li>\n<\/ul>\n\n
0.1.2<\/h4>\n\n\n- Moved OAuth connection management to WordPress's authenticated admin-AJAX endpoint for compatibility with hosts that block credential-bearing REST requests.<\/li>\n
- Added dedicated capability and nonce validation to the admin connection handler.<\/li>\n
- Kept connection error responses readable without relying on upstream HTTP error statuses.<\/li>\n<\/ul>\n\n
0.1.1<\/h4>\n\n\n- Improved OAuth connection testing and preserved Folderit error details.<\/li>\n
- Distinguished Folderit response codes from WordPress REST response codes.<\/li>\n
- Added actionable diagnostics for blocked, missing, or failed WordPress REST requests.<\/li>\n
- Trimmed accidental whitespace from pasted OAuth credentials.<\/li>\n<\/ul>\n\n
0.1.0<\/h4>\n\n\n- Initial release.<\/li>\n
- Added Folderit connection, form builder, destination picker, block, shortcode, staged uploads, activity, notifications, privacy guidance, and submission protection.<\/li>\n<\/ul>","raw_excerpt":"Create WordPress forms that save submissions and attachments directly to Folderit.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/358759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=358759"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/folderit"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=358759"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=358759"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=358759"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=358759"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=358759"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=358759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}