Title: SPWForm
Author: SquaremanPixelWorksLLC
Published: <strong>30 Agosto 2026</strong>
Last modified: 23 Settembre 2026

---

Ricerca i plugin

![](https://ps.w.org/spw-form/assets/banner-772x250.png?rev=3672080)

![](https://ps.w.org/spw-form/assets/icon-256x256.png?rev=3672080)

# SPWForm

 Di [SquaremanPixelWorksLLC](https://profiles.wordpress.org/squareman/)

[Scarica](https://downloads.wordpress.org/plugin/spw-form.0.2.9.zip)

 * [Dettagli](https://it.wordpress.org/plugins/spw-form/#description)
 * [Recensioni](https://it.wordpress.org/plugins/spw-form/#reviews)
 *  [Installazione](https://it.wordpress.org/plugins/spw-form/#installation)
 * [Sviluppo](https://it.wordpress.org/plugins/spw-form/#developers)

 [Supporto](https://wordpress.org/support/plugin/spw-form/)

## Descrizione

SPWForm is a mail form plugin for WordPress. You define each form in the admin screen,
place the generated shortcode on a page, and manage the mail settings — all without
writing PHP. If you have built forms with traditional WordPress mail-form plugins,
the shortcode-based workflow will feel immediately familiar.

Each form is managed as a private custom post type. You can build the form body 
with shortcodes for common fields, configure auto-reply and administrator notification
emails, and choose whether to use a confirmation step before sending.

#### Two ways to style your forms

SPWForm suits both newcomers and experienced developers:

 * Instant design — A ready-made sample form is included on a fresh install. Duplicate
   it, turn on “Use SPWForm standard styles,” and you get a clean, styled form out
   of the box with no CSS required.
 * Full design freedom — Leave “Use SPWForm standard styles” off, and no standard
   design is applied. Style the form entirely with your own CSS or theme to match
   any design — the traditional, hands-on approach experienced form builders are
   used to.

Either way, you can start from the bundled sample and adjust the fields, emails,
and validation to fit your site.

#### Main features

 * Form management screen in the WordPress admin.
 * Form output with `[SPWForm_scode key="FORM_ID"]`.
 * Field shortcodes for text, textarea, email, hidden, radio, checkbox, select, 
   and file upload fields.
 * Confirmation and completion flow support.
 * Auto-reply email and administrator notification email settings.
 * Custom validation rules for required fields, email addresses, matching fields,
   numbers, text types, URLs, postal codes, and phone numbers.
 * File upload support with configurable allowed file extensions.
 * Bundled structural and state safeguards for every form, plus an optional standard
   design loaded only on pages that render an enabled form.
 * Per-form completion message.
 * Optional separate input, confirmation, and completion URLs.
 * Noindex output for confirmation and completion pages when Step URLs are used.
 * Localized default sample forms for Japanese and English sites.

#### Supported field shortcodes

 * `[spwf_text]`
 * `[spwf_textarea]`
 * `[spwf_mail]`
 * `[spwf_hidden]`
 * `[spwf_radio]`
 * `[spwf_checkbox]`
 * `[spwf_select]`
 * `[spwf_file]`
 * `[spwf_back]`
 * `[spwf_submit]`
 * `[spwf_confirm]`
 * `[spwf_reset]`

#### Notes

SPWForm sends mail through WordPress’ `wp_mail()` function. Actual delivery depends
on your server and mail configuration. For reliable delivery, configure your site
and sender domain correctly, including SPF, DKIM, and DMARC where appropriate.

### External services

SPWForm connects to Google reCAPTCHA only when a site administrator enables reCAPTCHA
for a form and supplies Google reCAPTCHA keys.

The visitor’s browser loads the reCAPTCHA JavaScript API from Google. On submission,
SPWForm sends the response token, the configured Secret Key, and the visitor’s IP
address to Google’s verification endpoint (`https://www.google.com/recaptcha/api/
siteverify`). Google processes this information to determine whether the interaction
is legitimate. No form-field contents are sent by SPWForm to the verification endpoint.

This service is provided by Google and is subject to Google’s terms and privacy 
policy:

 * Google Terms of Service: https://policies.google.com/terms
 * Google Privacy Policy: https://policies.google.com/privacy
 * reCAPTCHA documentation: https://developers.google.com/recaptcha/

## Screenshot

[⌊Form edit screen.⌉⌊Form edit screen.⌉[

Form edit screen.

[⌊Mail settings screen.⌉⌊Mail settings screen.⌉[

Mail settings screen.

[⌊Validation settings and shortcode reference.⌉⌊Validation settings and shortcode
reference.⌉[

Validation settings and shortcode reference.

[⌊Completion message settings.⌉⌊Completion message settings.⌉[

Completion message settings.

## Installazione

 1. Upload the plugin files to the `/wp-content/plugins/spw-form/` directory, or install
    the plugin through the WordPress Plugins screen.
 2. Activate the plugin through the Plugins screen in WordPress.
 3. Open the SPWForm menu in the WordPress admin.
 4. Create or edit a form.
 5. Copy the generated shortcode, such as `[SPWForm_scode key="123"]`.
 6. Paste the shortcode into the page where you want to show the form.

When the plugin is activated on a site with no existing SPWForm forms, it creates
one localized sample form.

## FAQ

### How do I display a form?

Create a form in the SPWForm admin screen, then place the generated shortcode on
a page:

    ```
    [SPWForm_scode key="123"]
    ```

Replace `123` with the form ID shown in the form edit screen.

### Can I use a confirmation screen before sending?

Yes. Add the back, submit, and confirm button shortcodes to the form body:

    ```
    [spwf_back value="Back"]
    [spwf_submit value="Submit"]
    [spwf_confirm value="Confirm"]
    ```

Use `tag="button"` on Back, Submit, Confirm, or Reset to render a `<button>` element.
Back, Submit, and Confirm remain submit controls; Reset remains a reset control.
For presentation, use the `class` attribute with CSS defined by your theme. User-
supplied `style` attributes are not rendered.

You can also configure separate Step URLs for input, confirmation, and completion
pages.

### Which file types can be uploaded?

The file field supports an `allow` attribute. Supported extensions include:

    ```
    jpg jpeg png gif webp pdf txt csv zip doc docx xls xlsx
    ```

If `allow` is omitted, image file types are allowed by default.

### Does SPWForm include spam protection?

Yes. The core plugin includes two spam defenses that work without any configuration:

 * A honeypot field that silently drops submissions made by automated bots.
 * Rate limiting that stops the same visitor from sending many messages in a short
   time (by default, up to 5 sends per 60 seconds).

These are enabled automatically. For stronger protection against targeted spam, 
each form can optionally use Google reCAPTCHA v2 checkbox or v3. Open the form editing
screen, enable reCAPTCHA, choose its type, and enter the matching Site Key and Secret
Key.

Please note: because these defenses are enabled by default, visitors who submit 
many times in quick succession (for example, several people sharing one office/network
connection) may occasionally see a “please wait and try again” message. Developers
can adjust the limits with the `spwf/rate_limit/*` filters.

### Submissions are rejected with a security error. What should I check?

If the form page is served from a full-page cache (for example WP Super Cache, LiteSpeed
Cache, or a CDN), the security token embedded in the cached page can expire after
several hours, causing later submissions to be rejected. Exclude the form page from
full-page caching so each visitor receives a fresh page.

### How are uploaded files protected on nginx or other non-Apache servers?

Uploaded files are stored under `wp-content/uploads/spwform/`. These files are never
linked by a public URL: the core plugin uses them only as email attachments, and
the Pro add-on serves stored attachments through an authenticated admin request.
On Apache, a bundled `.htaccess` file blocks directory listing and direct access
to this folder.

Servers that do not read `.htaccess` (for example nginx) ignore this protection.
On such servers, add an equivalent rule to your server configuration to deny direct
web access to the folder. For nginx:

    ```
    location ^~ /wp-content/uploads/spwform/ { deny all; }
    ```

Adjust the path if your uploads directory is in a non-default location. Because 
these files are never linked publicly, denying direct access does not affect any
feature. File names are random and the folder cannot be listed, so this is a defense-
in-depth measure.

### Can I place multiple SPWForm forms on one page?

No. Placing more than one SPWForm form on the same page is not supported. Please
use one form per page.

### Where can I find documentation?

Documentation is available in the plugin admin screen. A Japanese guide is also 
available at:

https://studio.squareman.net/guide/spwform/

## Recensioni

Non ci sono recensioni per questo plugin.

## Contributi e sviluppo

“SPWForm” è un software open source. Le persone che hanno contribuito allo sviluppo
di questo plugin sono indicate di seguito.

Collaboratori

 *   [ SquaremanPixelWorksLLC ](https://profiles.wordpress.org/squareman/)

“SPWForm” è stato tradotto in 1 lingua. Grazie a [chi traduce](https://translate.wordpress.org/projects/wp-plugins/spw-form/contributors)
per il contributo.

[Traduci “SPWForm” nella tua lingua.](https://translate.wordpress.org/projects/wp-plugins/spw-form)

### Ti interessa lo sviluppo?

[Esplora il codice](https://plugins.trac.wordpress.org/browser/spw-form/) segui 
il [repository SVN](https://plugins.svn.wordpress.org/spw-form/), segui il [log delle modifiche](https://plugins.trac.wordpress.org/log/spw-form/)
tramite [RSS](https://plugins.trac.wordpress.org/log/spw-form/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 0.2.9

 * Added optional per-form Google reCAPTCHA v2 checkbox and v3 protection to the
   core plugin.
 * Preserved existing SPWForm Pro reCAPTCHA settings and added a safe compatibility
   handoff for older Pro versions.
 * Added a verification-result action for privacy-conscious aggregate reporting 
   by add-ons.

#### 0.2.8

 * Added translation support so the interface follows the site language.

#### 0.2.7.4

 * Improved the performance of default sample-form detection so it no longer slows
   down on sites with a large number of forms.

## Meta

 *  Versione **0.2.9**
 *  Ultimo aggiornamento **12 ore fa**
 *  Installazioni attive **Meno di 10**
 *  Versione WordPress ** 6.5 o superiore **
 *  Testato fino alla versione **7.1.2**
 *  Versione PHP ** 7.4 o superiore **
 *  Lingue
 * [English (US)](https://wordpress.org/plugins/spw-form/) e [Japanese](https://ja.wordpress.org/plugins/spw-form/).
 *  [Traduci nella tua lingua](https://translate.wordpress.org/projects/wp-plugins/spw-form)
 * Tag
 * [contact form](https://it.wordpress.org/plugins/tags/contact-form/)[file upload](https://it.wordpress.org/plugins/tags/file-upload/)
   [form builder](https://it.wordpress.org/plugins/tags/form-builder/)[mail form](https://it.wordpress.org/plugins/tags/mail-form/)
   [shortcode](https://it.wordpress.org/plugins/tags/shortcode/)
 *  [Visualizzazione avanzata](https://it.wordpress.org/plugins/spw-form/advanced/)

## Valutazioni

Non sono state ancora inviate recensioni.

[La tua recensione](https://wordpress.org/support/plugin/spw-form/reviews/#new-post)

[Vedi tutte le recensioni](https://wordpress.org/support/plugin/spw-form/reviews/)

## Collaboratori

 *   [ SquaremanPixelWorksLLC ](https://profiles.wordpress.org/squareman/)

## Supporto

Hai qualcosa da dire? Ti serve aiuto?

 [Chiedi nel forum di supporto](https://wordpress.org/support/plugin/spw-form/)