Quoteform is a form builder for one job: working out a price. A visitor picks a\nconfiguration \u2014 three rooms, two bathrooms, express turnaround \u2014 and a quote\ncomes out of it. That is a different problem from a contact form, and Quoteform\nis built for it rather than around it.<\/p>\n\n
Conditional logic and multi-step forms are the two features that calculator\nplugins usually keep behind a paid upgrade. Here they are simply part of the\nplugin.<\/p>\n\n
subtotal<\/code> and total<\/code>. A\ncalculation may refer to another one, and Quoteform works out the order for\nyou.<\/li>\n- Rules<\/strong> \u2014 conditional logic. Show or hide a field or a whole step, or make a\nfield required or optional, based on what has been answered. Conditions use\nequals, does not equal, greater than, greater than or equal, less than, less\nthan or equal, contains, does not contain, is empty and is not empty.<\/li>\n
- Settings<\/strong> \u2014 currency, currency position and the number of decimal places.<\/li>\n<\/ul>\n\n
Showing a form to visitors<\/h4>\n\n
A saved form can be placed on the site in three ways, and all three draw exactly\nthe same form:<\/p>\n\n
\n- Shortcode<\/strong> \u2014
[quoteform id=\"12\"]<\/code>, where 12<\/code> is the id shown in the form\nlist. It works in posts, pages and any widget or template that runs\nshortcodes.<\/li>\n- Block<\/strong> \u2014 search the block inserter for Quote form<\/strong>, then pick the form\nfrom the dropdown in the block itself.<\/li>\n
- Elementor<\/strong> \u2014 the Quote form<\/strong> widget, under General. It appears only when\nElementor is installed.<\/li>\n<\/ul>\n\n
On the page, the visitor moves through the steps with Back and Next. The total\nupdates as they answer, fields and steps appear and disappear as the rules say\nthey should, and a required field they can see has to be filled in before Next\nwill move them on. On the last step the total is broken down into the\ncalculations that make it up.<\/p>\n\n
Submissions and entries<\/h4>\n\n
On the last step the visitor submits the form. The server then works out the\nprice again from the answers alone. The browser never sends a total, so a\nvisitor cannot change the price that gets stored.<\/p>\n\n
\n- After a submission<\/strong> \u2014 show a message with the total and its breakdown, or\nredirect the visitor to a URL. You choose this per form.<\/li>\n
- Spam protection<\/strong> \u2014 a hidden honeypot field and a time check signed by the\nserver. No CAPTCHA and no external service.<\/li>\n
- Entries screen<\/strong> \u2014 every submission is stored in your WordPress database\nand listed under Quoteform \u2192 Entries<\/strong>. Filter by form, new or read, date\nand total. Open an entry to see each answer and the price breakdown.<\/li>\n
- Bulk actions<\/strong> \u2014 mark entries as read or unread, or delete them.<\/li>\n
- CSV export<\/strong> \u2014 export the entries that match the current filters.<\/li>\n<\/ul>\n\n
What this version does not do<\/h4>\n\n
Quoteform does not send email notifications, does not take payments and does\nnot let a visitor save a form and come back to it later. Entries are only on\nthe Entries screen and in the CSV export.<\/p>\n\n
Formulas, without writing code<\/h4>\n\n
Formulas are written in a small, deliberately limited expression language:<\/p>\n\n
{room_count} * 50 + {bathrooms} * 120\n\nif({urgency} == \"express\", {subtotal} * 1.3, {subtotal})\n\nround(max({subtotal}, 99), 2)\n<\/code><\/pre>\n\nThe available functions are if<\/code>, min<\/code>, max<\/code>, sum<\/code>, round<\/code>, ceil<\/code>, floor<\/code>,\n abs, contains<\/code> and is_empty<\/code>. The formula editor checks each formula as you\ntype: it tells you where a formula is malformed, and when a formula refers to\nsomething the form does not have it says so \u2014 and if the name is close to one\nthat does exist, it asks whether that is what you meant.<\/p>\n\nNothing is ever executed<\/h4>\n\n
The expression language is not JavaScript and it is not PHP. Formulas are read\nby Quoteform's own parser into a syntax tree and evaluated one node at a time.\nPHP's eval()<\/code> and JavaScript's eval()<\/code> and Function()<\/code> are not used anywhere\nin this plugin. The JavaScript that ships is checked before every release for\nevery spelling of both \u2014 eval()<\/code>, Function()<\/code> and new Function()<\/code> \u2014 so the\npromise is kept by a machine rather than by memory.<\/p>\n\nEvery form is validated again on the server when it is saved, no matter what the\nbrowser sent. Circular references between calculations are refused at save time\nrather than discovered later.<\/p>\n\n
Light on the front end<\/h4>\n\n
The front-end script is under 10 KB gzipped and loads no framework: no React,\nno jQuery, no web fonts, no CDN. It is enqueued only on pages that actually\ncontain a form.<\/p>\n\n
Free, and that is the whole plan<\/h4>\n\n
No pro version, no add-ons, no license key, no account and no hosted service.\nQuoteform sends no data anywhere: it makes no request to any external server,\nloads no fonts or scripts from a CDN, and collects no usage statistics.<\/p>\n\n
Privacy<\/h4>\n\n
Submitted entries stay in your own WordPress database. Each entry stores the\nanswers, the calculated total and its breakdown, the date, the visitor's\nbrowser user agent and, if the visitor was logged in, their user ID. The\nvisitor's IP address is stored only if you turn on Store the visitor's IP\naddress with each entry<\/strong> in the form settings. It is off by default.<\/p>\n\nThe answers can contain personal data, such as a name or an email address,\nwhen your form asks for it. Mention this in your site's privacy policy.<\/p>\n\n
Source code<\/h3>\n\n
The JavaScript and CSS in build\/<\/code> are compiled. Their human-readable source\nlives in admin-src\/<\/code> and frontend-src\/<\/code> of the public repository:<\/p>\n\nhttps:\/\/github.com\/muradNasrullayev\/quoteform<\/p>\n\n
To rebuild the assets from source:<\/p>\n\n
\nnpm install<\/code><\/li>\nnpm run build<\/code><\/li>\n<\/ol>\n\nPHP dependencies are installed with composer install --no-dev<\/code>.<\/p>\n\n\n\n- Install the plugin from the Plugins screen in WordPress, or upload the\n quoteform folder to
wp-content\/plugins\/<\/code>.<\/li>\n- Activate it on the Plugins screen.<\/li>\n
- Open Quoteform<\/strong> in the admin menu and create your first form.<\/li>\n
- Put the form on a page with the Quote form<\/strong> block, the
[quoteform id=\"\u2026\"]<\/code>\nshortcode or the Elementor widget.<\/li>\n<\/ol>\n\nActivating the plugin gives administrators three capabilities:<\/p>\n\n
\nqform_manage_forms<\/code> \u2014 create and edit forms, and delete entries.<\/li>\nqform_view_entries<\/code> \u2014 see the Entries screen.<\/li>\nqform_export_entries<\/code> \u2014 export entries to CSV.<\/li>\n<\/ul>\n\nThey are deliberately separate from manage_options<\/code>, so you can grant them to\nanother role without handing over the rest of the site settings.<\/p>\n\n\n\nIs it really free?<\/h3><\/dt>\nYes. There is no paid version to upgrade to, no add-ons to buy, no license key\nto enter and no account to create. Nothing in the plugin is locked.<\/p><\/dd>\n
Can visitors submit the form?<\/h3><\/dt>\nYes. The submission is stored as an entry in your WordPress database, and you\nsee it under Quoteform \u2192 Entries<\/strong>. The price is calculated again on the\nserver, so the stored total is always the one your formulas give.<\/p><\/dd>\nWill I get an email when someone submits a form?<\/h3><\/dt>\nNot in this version. Check the Entries screen, or export the entries to CSV.<\/p><\/dd>\n
Do I need Elementor, Divi or a page builder?<\/h3><\/dt>\nNo. The builder is an ordinary WordPress admin screen, and the shortcode and the\nblock need nothing beyond WordPress itself. The Elementor widget is there for\nsites that already use Elementor.<\/p><\/dd>\n
My form is loaded by a popup or by AJAX and stays empty. What now?<\/h3><\/dt>\nA form that arrives after the page has finished loading has to be started. Call\n window.quoteform.boot() once the markup is in the page:<\/p>\n\n
window.quoteform.boot();\n<\/code><\/pre>\n\nPass an element to limit it to that part of the page \u2014 window.quoteform.boot(\ndocument.querySelector( '#my-popup' ) )<\/code>. Calling it again is safe: a form that\nis already running is left alone.<\/p><\/dd>\nCan a formula run arbitrary code?<\/h3><\/dt>\nNo. Formulas are written in Quoteform's own small expression language, which has\nnumbers, text, comparisons, arithmetic and ten named functions \u2014 and nothing\nelse. They are parsed into a syntax tree and evaluated by the plugin. eval()<\/code> is\nnot used, in PHP or in JavaScript, anywhere in the plugin.<\/p><\/dd>\nWhat happens to my forms if I deactivate the plugin?<\/h3><\/dt>\nNothing is deleted. Forms are stored as WordPress posts, so they are still there\nwhen you activate the plugin again. Deactivating does not remove the\ncapabilities it granted either, so a site that is temporarily switched off comes\nback exactly as it was.<\/p><\/dd>\n
And if I delete the plugin?<\/h3><\/dt>\nDeleting is not the same as deactivating. Deleting Quoteform permanently\ndeletes every form you have made and every entry submitted to them<\/strong>, including\nforms in the trash, and removes\n qform_manage_forms, qform_view_entries<\/code> and qform_export_entries<\/code> from every\nrole on the site. On a multisite network it does this on every site of the\nnetwork, because the forms and the roles live on each site separately. Nothing\nis recoverable afterwards, so export your entries to CSV and copy anything else\nyou want to keep before you click Delete.<\/p><\/dd>\nWho can create and edit forms?<\/h3><\/dt>\nAnyone with the qform_manage_forms<\/code> capability, which administrators get when\nthe plugin is activated. The same capability is required by the REST endpoints\nunder quoteform\/v1<\/code> that the builder uses, so there is no way around it.<\/p><\/dd>\nWhich languages does it speak?<\/h3><\/dt>\nThe interface is written in English and is fully translatable \u2014 every string in\nboth the PHP and the JavaScript goes through WordPress's translation functions,\nand a .pot<\/code> file ships in languages\/<\/code>.<\/p><\/dd>\n\n<\/dl>\n\n\n0.1.2<\/h4>\n\n\n- The readme now describes submissions, the Entries screen, CSV export and the\ndata each entry stores.<\/li>\n
- Removed the \"save and resume\" option from the form settings. The feature is\nnot implemented yet.<\/li>\n<\/ul>\n\n
0.1.1<\/h4>\n\n\n- Fix: the entries table install no longer records its version when the table\ncould not be created, so it is retried on the next load.<\/li>\n
- Fix: the entries table definition is compatible with MySQL versions before\n8.0.13.<\/li>\n
- Security: the CSV export reads only the parameters it needs and sanitizes\neach one.<\/li>\n
- The uninstall routine runs only when WordPress itself uninstalls the plugin.<\/li>\n<\/ul>\n\n
0.1.0<\/h4>\n\n\n- First release.<\/li>\n
- Form builder: fields, steps, calculations, conditional rules and form\nsettings.<\/li>\n
- Expression language for pricing formulas, validated as you type in the editor\nand again on the server when the form is saved. The formula editor suggests\nthe name you probably meant when a reference is a near miss.<\/li>\n
- Front-end renderer: multi-step navigation, conditional show and hide, a live\ntotal, a breakdown on the last step, and per-step validation of the fields the\nvisitor can actually see. No React and no jQuery.<\/li>\n
- Three ways to place a form: the
[quoteform id=\"\u2026\"]<\/code> shortcode, the Quote\nform<\/strong> block and an Elementor widget. All three render the same form.<\/li>\nwindow.quoteform.boot()<\/code> for forms that arrive after the page has loaded.<\/li>\n- REST API under
quoteform\/v1<\/code> for the builder, gated by the\n qform_manage_forms capability.<\/li>\n<\/ul>","raw_excerpt":"Build multi-step quote and price calculator forms with conditional logic, and collect the quotes your visitors submit. Free, with no paid upgrade.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/390429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=390429"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/miratnasrullayev"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=390429"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=390429"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=390429"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=390429"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=390429"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=390429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}