Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress

變更記錄

= 3.7.0 (07 November 2023)
* Features:*
– Ability to preserve ‘extra’ data after redirect

• Bug Fixes: *

• Ensure extra data on CSV export is in correct chronological order

• Other: *

• Updated end to end test

= 3.6.34 (11 October 2023)

• Bug Fixes: *
• Prevent script triggers in field labels

• Ensure needed export data present before action

• Other: *

• Update to country list
• Close notice from bulk export results

= 3.6.33 (3 October 2023)

• Bug Fixes: *
• Error re-triggering email action when PDF is active
• Display anonymized repeater field data in submissions
• Error on missing class name
• Remove Max-width CSS being applied to form content

• misspelled text fixes

• Other *

• Dependencies bumps= 3.6.32 (21 September 2023)

• Bug Fixes: *

• rePrints data on the template for the frontend in order to prevent conflicts with other plugins
• checks if the description of fields in the builder is set before running trim

= 3.6.31 (19 September 2023)

• Bug Fixes: *

• Fixes form not displaying and form stuck on processing from jQuery trim() failure on non-string

• Other: *

• Remove old promotions banner

= 3.6.30 (14 September 2023)

• Bug Fixes: *
• Form should now submit properly if submit button label and processing label match.

• Ensure forms display on themes using wp_localize_script

• Other: *

• Remove support for NF 2.9
• JS dependency updates: update to React 18, WordPress block editor/scripts/server side render/i18n, babel-jest, core-js

= 3.6.29 (16 August 2023)

Bug fixes:
* Fix submission retrieval error missing submissions within time stamp on date
* Ensure 7.4-required functionality doesn’t trigger warnings

Other:
* Update library for autonumeric, WP scripts
* Update tested up to, now 6.3 was 6.2.2

= 3.6.28 (06 July 2023)

Bug fixes:
* Correct issue that prevented form deletion

= 3.6.27 (04 July 2023)

Bug fixes:
* Use static call for class name for PHP 7 support

= 3.6.26 (04 July 2023)

Other:
* Ensure minimum required version on packages

Security Enhancements:
* Prevent unauthorized download of submission
* Prevent scripts in dashboard field labels; responsibly reported by Sayandeep Dutta
* Prevent front-facing label scripts; responsibly reported by Jonathon Zamora & WordPress.org
* Prevent excess extra data through automated form submission
* Prevent override access where not permitted

= 3.6.25 (14 June 2023)
Bug Fixes:
– Remove duplicate radio bubble on opionated styles mobile
– Restrict delete file route to uploads directory

Other:
– Bump @wordpress/jest-preset-default from 10.9.0 to 11.4.0 #6579
– Bump core-js from 3.30.1 to 3.30.2 #6578
– Bump axe-core from 4.7.0 to 4.7.1 #6577
– Bump @wordpress/components from 23.9.0 to 24.0.0 #6576
– Bump @babel/core from 7.21.5 to 7.21.8 #6575
– Prototype Pollution in lodash
– Regular Expression Denial of Service in trim
– glob-parent before 5.1.2 vulnerable to Regular Expression Denial of Service in enclosure regex
– Uncontrolled Resource Consumption in trim-newlines
– Inefficient Regular Expression Complexity in nth-check

= 3.6.24 (12 May 2023)
Bug Fixes:
– Prevent bypass of required field with modified data
– Prevent datepicker to break the view when set with 0 minutes increment
– Prevent Submit button to double submit a form

= 3.6.23 (26 April 2023)
Bug Fixes:
– Ensure HTML fields load merge data
– Add fieldset repeater uploads to CSV and emails

= 3.6.22 (20 April 2023)
Bug Fixes:
– Prevent possible XSS vulnerability

= 3.6.21 (12 April 2023)
Bug Fixes:
– Ensure cron_interval value is integer
– Ensure option definition value has fallback value
– Ensure cache update process doesn’t break on errant stored data
– Replace deprecated use of self in callable
– Use form Id to filter field searches for faster response

= 3.6.20 (14 March 2023)
Bug Fixes:
– Error management in Repeater fieldsets (fields inside repeater fieldsets now respond to frontend validation)
– Display repeater field data in HTML field via merge tags
– Include Repeater data in CSVs when the repeater wasn’t repeated
– Display repeater data in retrigger email actions (and its CSV)
– Display Correct repeater child fields labels in emails
– Display repeater description on form
– Ensure correct rendering of date field in repeaters
– CSVs now display repeaters data as one row for each fieldset

Fixes for extensions:
– Save progress display repeater field without errors
– Multi-part compatibility display repeater field, with merge tags and data saved correctly

= 3.6.19 (22 February 2023)
Bug Fixes:
– Migrate/update jBox library
– Ensure language filter results are passed to downstream filters
– Prevent non-string math error

Other:
– Add version checks for extensions

= 3.6.18 (16 February 2023)
Bug Fixes:
– Prevent deprecated warning null preg_match_all
– Ensure empty form does not throw error on preview
– Ensure array for currency doesn’t throw fatal error
– Declare previously undeclared properties (PHP 8)
– Prevent undefined array key error
– Ensure missing key in recaptcha field doesn’t fail

= 3.6.17 (8 February 2023)
Bug Fixes:
– Ensure HTML injected in label is sanitized
– Correct typo in date format for option DD/MM/YYYY
– Ensure GMT offset setting does not prevent submissions page display
– Prevent deprecated notice on empty merge tag “other”
– Prevent deprecated notice for jsonSerialize
– Prevent deprecated notice for passing null value

= 3.6.16 (18 January 2023)
Bug Fixes:
* Import buffer class to re-enable download as PDF
Other Enhancements:
* Add code coverage reporting

3.6.15 (10 January 2023)

Bug Fixes:
* Resolves add-on manager fatal error
* Prevents image in HTML loading error for WP 6.1
* Correct multiple accessibility warnings
* Enables empty step in number field
* Enables default zero value
Other Enhancements:
* Update ‘tested to’
* Set resolutions to prevent vulnerable child dependencies

3.6.14 (2 September 2022)

Bug Fixes:
* Fixes an issue with trailing commas
* Fixes an issue for some users on PHP7.4 and below.
Other Enhancements:
* Update ‘tested to’

3.6.13 (30 August 2022)

Bug Fixes:
* Prevent object wakeup in unserialize
* Correct errant variable name is submissions check
Other Enhancements:
* Smart suggestions for extensions
* Update ‘tested to’

3.6.12 (22 June 2022)

Bug Fixes:
* Fixed naming collision with reCaptcha cookie check
* HTML re-enabled in field labels for users with correct capabilities
* Removed orphaned repeater field setting from advanced settings
* Fixed form imports for non-UTF-8 encoded files

3.6.11 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

3.6.10 (07 June 2022)

Bug Fixes:
* Retrigger emails from Submissions page if form only has 1 Email Action
* Invalid Date message triggered by Date Picker Field
* Typo in Delete Form popup
* Importing a form sets the Step value of any Number field to 1, regardless of the Export value
* Front End Checkbox/Radio lists are not keyboard accessible
* Form Preview Page does not work in themes that enable full site editor
* Public link not working in some themes
* Checkbox Fields with a checked calc value of 0 evaluate to 1 in JS
* Activating Layouts & Styles removes merge tags from email actions until the form is republished
* Trigger error when cookies for reCaptcha v3 were not allowed ( Implemented with hooks )
* Submissions page select dates filter restored

Security Enhancements
* Improve escaping on field template labels and values reported responsibly by Ryan at WP Scan
* Improve sanitization of label values
* Improve authorization check for field imports

3.6.9 (24 March 2022)

Bug Fixes:
Restore “Download All Submissions” functionality

= 3.6.8 (14 March 2022)

Bug Fixes:
Correct Repeatable Fieldset CSV output, was Array Array Array
Add “Trash” view to React submissions page
Fix broken submission view when Date field added to converted CF form

Security Enhancements
Remove CSV temp files stored in publicly accessible location, reported responsibly by Agence Web Coheractio – Paris at https://www.coheractio.com

= 3.6.7 (30 November 2021)

Bug Fixes:

• Fix Danish/Finnish language halts submissions page display
• Exclude confirm field from submission data
• Scroll list fields to prevent extremely tall rows
• Correctly display checkbox value in submission table
• Fix PHP warning on column control
• Remove note, html, submit, confirm fields from CSV export
• Use set date format on CSV export
• Prevent XSS in form title

= 3.6.6 (15 November 2021)

Bug Fixes:

• Rename ‘store submission’ to record submission’
• Enable extra data column headers in CSV export
• Use admin labels in tables and export

= 3.6.5 (04 November 2021)

Bug Fixes:

• Ensure submission column selections are remembered for next viewing
• Ensure date time is properly displayed in submission popup editor
• Display calculations metabox in submissions
• Add temporary submissions page rollback option
• Fix failing search results on submissions page
• Ensure checkbox displays correct value, not always ‘checked’

= 3.6.4 (25 October 2021)

Bugs:

• Prevent data timeout error by reducing size of initial submission request
• Prevent SQL injection from field key
• Prevent overwriting of ConvertKit action name during import
• Ensure forms that don’t have email actions appear in submission page list

= 3.6.3 (18 October 2021)

Bugs:

• Update submission link on form dashboard
• Check for CF database before adding CF data source

= 3.6.2 (12 October 2021)

Bugs:

• Ensure submissions appear when timezone setting puts submission ahead of current timestamp

= 3.6.1 (11 October 2021)

Bugs:

• Move sequence id from submission editing to metadata
• Use correct popup for autogenerate Add New modals

Changes:

• Ignore build files from commit

= 3.6.0 (04 October 2021)

Changes:

• Enable display of Caldera Forms submissions in Ninja Forms submission table

Bugs:

• Prevent button field from being used through search function

3.5.8.4 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

= 3.5.8.3 (22 September 2021)

Bugs:

• Ensure sanitized values enables spaces between classNames

= 3.5.8.2 (21 September 2021)

Bugs:

• Ensure cached value of form is stored with sanitized value

= 3.5.8.1 (15 September 2021)

Bugs:

• Resolved security vulnerability of admin+ stored XSS on form design

= 3.5.8 (07 September 2021)

Bugs:

• Resolved security vulnerability in the submissions route. Responsibly reported by Chloe Chamberland at Wordfence.
• Resolved an issue that rarely caused submission to fail on forms containing a multiselect field.

Changes:

• Updated several of our build dependency packages.
• Automated build and deploy to SVN.

3.5.7 (5 July 2021)

Bugs:

• Resolved an error that was causing the plugin to crash on sites using a PHP version below 7.0.

3.5.6 (29 June 2021)

Bugs:

• Bulk resend email should now properly populate the email subject line instead of using a default value.
• Repeatable fieldset data should now display properly in the submission block.
• Corrected an issue that was preventing forms from displaying when repeatable fieldsets contained a date field, a rich text enabled paragraph field, or a field with a custom mask.
• When set, the submission limit should now be properly enforced on submissions made via forms loaded before the limit was reached.
• Move to trash should once more be available in the bulk actions on the submissions page.

3.5.5 (07 June 2021)

Changes:

• Added support for Google Recaptcha V3.
• Added a new option to resend email actions from the submissions table.
• Added the ability to export multiple form submission CSVs at once.
• Escape query args for enhanced security – Responsibly reported by Erwan at WP Scan

Bugs:

• Fixed a bug that caused an extra : to be shown in the date field on older forms.
• Fixed a bug with field settings that caused some settings to not show when they should have.
• Multiple Recaptchas on the same page should work properly.

3.5.4 (21 April 2021)

Changes:

• The Date Field is now the Date/Time Field. This field now allows for Date, Time, and Date & Time selection.

Bugs:

• Fixed a bug that caused ReCaptcha fields to fail if more than one appeared on the page.
• Fixed a conflict with iThemes that was causing a fatal error.

3.5.3 (1 April 2021)

Changes:

• Final deprecation phase of Ninja Forms 2.9x codebase.

3.5.2 (24 March 2021)

Changes:

• Removed some legacy settings that were no longer required for new installs.

Bugs:

• Resolved an issue that was causing errors when Array values were used in API requests.
• The Ninja Forms block should now fill the entire width of the block editor.
• Fixed an error that was causing a depreciated method warning when using the classic editor.
• Forms should now display again in Internet Explorer 11.
• Resolved an issue that was causing the Ninja Forms dashboard to crash if there was an issue with wp_cron.
• Fixed some PHP warnings related to our checkbox list field.

3.5.1 (17 February 2021)

Bugs:

• Resolved an issue that was always causing required checkbox list fields to throw a required error on submission.
• The Ninja Forms block should now properly display the form in the page editor if WordPress has been installed in a subdirectory.
• Cleaned up a few notices and warnings that were displaying on sites running PHP 8.

3.5.0 (15 February 2021)

Changes:

• Repeatable Fieldsets have arrived! For a quick look at how to get those setup, check out our new documenation for them.

Bugs:

• Our block editor code should now only load on pages where it is actually needed, leading to less page load time in the admin dashboard.

3.4.34.2 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

3.4.34.1 (8 February 2021)

Security:

• Added a missing permissions check in our services connection manager reported responsibly by Chloe Chamberland at Wordfence.
• Patched a potential XSS vulnerability in our querystring merge tag.
• Added a missing filter that should have been excluding some personal information fields from the CSV attachment on Email Actions.

3.4.34 (25 January 2021)

Bugs:

• Forms should once again load properly in Internet Explorer 11.
• Single checkbox fields should now properly display their values in the submission table.
• Updated our dashboard styling to resolve an issue where some translations were resulting in action buttons being obscured.
• Restored drag and drop functionality for adding fields in the form builder.

Security:

• Patched a couple of vulnerabilities in our services oAuth controller reported responsibly by Chloe Chamberland at Wordfence.

3.4.33 (9 December 2020)

Bugs:

• Cleaned up a few conflicts with WordPress version 5.6.
  • Toggle switches in the form builder should now be working as expected.
  • Pre-selected options for lists should now persist properly in the form builder.
  • Element styling of some buttons should properly reflect the active or inactive status of the button.

3.4.32 (16 November 2020)

Bugs:

• Patched an issue with our new date field library that was causing it to display improperly on some mobile devices.

3.4.31 (12 November 2020)

Changes:

• Our date field library has been updated! For you developer types out there, we’ve switched from pikaday to flatpickr.
• Updated some of our form builder scripts in preparation for WordPress 5.6.

Bugs:

• Fixed a visual issue that sometimes allowed the Ninja Forms Dashboard view to extend beyond the width of the browser window.
• Resolved an error that sometimes caused an error message to appear when loading the Dashboard for the first time on a new installation.
• Resolved an error in our termslist field that caused the form builder to crash if you opened a form that was previously mapped to a term that had been deleted.
• Resolved an error that was sometimes causing PDF exports or emails with PDF attachments to fail.

3.4.30 (22 September 2020)

Bugs:

• Resolved an issue that was causing a fatal error on sites running PHP 5.6 or older.

3.4.29 (18 September 2020)

Bugs:

• Added missing dependency for our blocks.

3.4.28 (18 September 2020)

Changes:

• The Views Table Block has arrived!
• Updated the Ninja Forms Block to be more in-line with current Gutenberg conventions.
• Improved the efficiency of submission limit checks.
• The SendWP service can now be linked to the Ninja Forms dashboard.
• Apps & Integrations are now grouped by category for easier sorting.
• Updated color contrast of the form builder to be WCAG compliant.
• Custom Action now requires developer mode to be enabled.
• Updated the File Upload form template.

Bugs:

• Corrected improperly named filter for save action settings.
• Cleaned up some improperly escaped code on our get help page.
• Updated graphics associated with our add-ons to make them display properly.
• Corrected an issue that was causing the password field on our settings page to not properly save values.
• Increased the priority of our form builder class to ensure it properly loads over other elements on the page.
• Field duplication no longer improperly updates the target of calculations.
• Corrected the order of our submenu items.

Security:

• Added escaping for HTML content of fields in the submissions table.

3.4.27.1 (17 September 2020)

Security:

• Patched a CSRF vulnerability in our services integration reported responsibly by Slavco Mihajloski.
• Patched a validation bypass vulnerability in our email field.

3.4.27 (9 September 2020)

Bugs:

• Resolved an issue that sometimes caused the merge tag menu to not open properly in the form builder.

3.4.26 (25 August 2020)

Bugs:

• Sites with WP_DEBUG enabled should no longer display a deprecated parent error on PHP version 7.4.
• Resolved an issue that was preventing our Screen Options settings from being saved on the submissions page.

3.4.25 (12 August 2020)

Bugs:

• Resolved an issue that caused settings changed with a toggle switch to not be saved on WordPress 5.5.

3.4.24.3 (21 May 2020)

Security:

• Patched an HTML injection vulnerability in our deprecated 2.9x codebase reported responsibly by Dave Job.

Bugs:

• Corrected an error in our required field validation that was allowing targeted spam through the submission process.

3.4.24.2 (28 April 2020)

Security:

• Fixed Cross-Site Request Forgery(CSRF) to stored Cross-Site Scripting(XSS) reported responsibly by Ramuel Gall (Wordfence Threat Intelligence Team).

3.4.24.1 (5 March 2020)

Security:

• Patched an HTML injection vulnerability in our merge tag system. Many thanks to Tom Standley at ContainCo for practicing responsible disclosure.

3.4.24 (2 March 2020)

Bugs:

• User permission filters should now work as expected.
• Select image fields should now work properly when dev mode is disabled.
• Resolved an error that was causing php warnings on some API calls.
• Email settings should now properly read email addresses surrounded by <> characters.
• Resolved an error that was causing deprecated function warnings in php error logs.
• Forms with calculations should now display properly on sites using a “formal” language setting.
• Export should now properly appear as an option in the bulk actions on the submissions page.
• Resolved an error that was preventing the add-on manager from installing plugins.

Changes:

• Add-on updates will now enforce php requirements if the current version on the installation is below the minimum for the add-on.

3.4.23 (12 February 2020)

Security:

• Patched a delayed XSS vulnerability in our email action.
• Hardened the authorization security on our settings page.
• Patched a stored XSS vulnerability on our settings page.

Bugs:

• Ninja Forms should now properly honor user profile language settings if they are not the site default.
• Opening the form builder should no longer result in a php warning about an invalid argument.
• Cleaned up our publish code to avoid a few other php warnings.

Changes:

• Updated our event registration template to be more accessibility compliant.

3.4.22.1 (4 February 2020)

Security:

• Hardened the authorization security on several of our form endpoints.
• Audited all translation functions to prevent injection attacks.

3.4.22 (21 November 2019)

Bugs:

• The unique field restriction should no longer block payment actions from completing.
• Corrected an error that was preventing the current list of favorite fields from displaying in any location.
• Updated some of our builder styles to account for updates in WordPress 5.3.
• Corrected an error that sometimes caused the images in the select image field to not be found.
• Disabled an internal error logging function that was sometimes causing bloat in our database tables.

Changes:

• Email actions now support file attachments from the WordPress media library.

3.4.21 (11 November 2019)

Bugs:

• Added a missing label to our honeypot field, in case styling errors somehow make it visible.
• Removed an errant console message from our admin dashboard.
• Resolved an issue that was sometimes resulting in warnings being written to logs on form load.
• Modified our Gutenberg block to prevent it from displaying improperly on Bedrock installations.

Changes:

• The select image field has arrived!
• Added functionality for resetting the public link on a form.
• Forms in the dashboard can now be sorted by shortcode (ID).
• Added merge tags for form title, form id, and username (if authenticated).

3.4.20 (19 September 2019)

Bugs:

• Resolved an issue that was causing public links to fail on duplicated forms.
• The merge tag selector box in the form builder should no longer appear halfway off the page on smaller screen sizes.
• Long field keys should no longer cause the merge tag list to cover up the categories in the merge tag selector box.
• Resolved an issue that was causing some actions to fail after returning from a redirected payment gateway.
• List field options on imported forms should now appear in the correct order in the form builder.

3.4.19 (16 September 2019)

Bugs:

• Resolved an error that rarely caused form import to output as successful, when it had actually failed.
• The unique field restriction should no longer honor “nothing” as a valid value.
• Removed some deprecated dependencies that were throwing notices in the block editor.
• Updated list field item import in the form builder to make it less confusing.

3.4.18 (15 August 2019)

Bugs:

• SendWP registration should no longer cause an error when the SendWP plugin is already installed.
• Resolved an issue that was causing several of our action settings to display improperly in Firefox.
• Corrected a problem that was sometimes causing submission of forms with a PayPal action to fail.

Changes:

• Added currency support for the Chinese Yuan.

3.4.17 (12 August 2019)

Security:

• Removed an outdated template that was localizing a couple server variables.

Bugs:

• Currency masks should no longer prevent text fields from working properly in calculations.
• Cleaned up a few php notices due to older functions.
• Corrected the issue that was preventing required updates from completing. (Required updates remain disabled for the time being.)
• Number fields with a minimum value will now display that value as a placeholder, not a value.
• Switched the first and last name translations in our French translation pack.
• Added a missing attribute that was required by screen readers to the fields on our submission editor page.
• Resolved an error that was causing multi-select lists to not work properly in calculations.
• Submission limits should now be honored for forms that were displayed before the limit was reached.
• Dynamic option values should now work for ALL list types.
• Resolved an issue that was causing forms to display as code in some page builders.

Changes:

• The Advanced tab in the form builder should now communicate that developer mode is disabled, if that is the case.
• Added currency support for the Russian Ruble.

3.4.16 (19 June 2019)

Bugs:

• Temporarily disabled required updates in order to investigate a reported issue with them freezing.

3.4.15 (18 June 2019)

Bugs:

• Resolved an issue that sometimes caused the form dashboard to not display.

3.4.14 (18 June 2019)

Bugs:

• Resolved an issue that sometimes caused required updates to fail due to allowed server memory.
• Public form link should now be more reliable without needing to update site permalinks.
• Corrected a typo in the shortcode output of the Display Your Form settings.
• Dailed back our add-on updater script. It was checking for updates too often.
• Resolved an issue that was sometimes causing form submission to hang on processing, even though it had finished submitting data.
• Corrected a typo in the help text for auto-adding a submit button.
• Dynamic options in lists should now work properly everywhere, not just on form display.
• Fixed a couple of broken links on our Get Help page.
• The public link setting should no longer appear on the dashboard for forms where it is not enabled.

Changes:

• Updated our Details page in the WordPress repo.
• Date fields can no longer be added to calculations.

3.4.13 (17 May 2019)

Bugs:

• Restored the display of some action settings that were being improperly hidden in the form builder. (e.g. Stripe metadata and Update Profile custom meta.)
• Resolved an issue that sometimes caused submission to freeze when a required field was left empty.
• Forms should no longer fail to display when a total field is referenced in a calculation.

3.4.12 (13 May 2019)

Bugs:

• Updated our form load process to better account for reported excessive page load times.
• Resolved an issue that was causing various add-ons to behave strangely when there were multiple forms on a single page.

Changes:

• “Light” opinionated styles are now enabled by default on new Ninja Forms installations.

3.4.11 (7 May 2019)

Bugs:

• Multiple instances of the same form can now be loaded on a page.
• Resolved an issue that sometimes prevented favorite fields from being added to a form.
• Realistic preview of multiselect fields will now render more accurately in the builder.
• Resolved an issue that sometimes caused required updates to miscommunicate completion progress.
• Field keys should once more be accessible in submission filters.
• Querystring merge tags should no longer display their tags when the querystring is not present.
• Builder help texts should no longer contain unrendered HTML elements.

Changes:

• Added currency support for the Malaysian Ringgit.
• Added realistic field support for the save button and password field in the form builder.
• Some settings have been registered as developer options, which will be disabled by default to avoid settings clutter.
• Public links are now available for Ninja Forms! Found next to the publish button, public links provide form access to anyone with the link. Just copy and paste the unique URL and anyone can see and use your form.

3.4.10 (15 April 2019)

Bugs:

• Resolved an issue that caused the form builder to crash when editing forms that had a select list with no options.

3.4.9 (10 April 2019)

Bugs:

• Resolved an issue that sometimes caused submission dates to show inaccurately in the submissions table.

Changes:

• We’ve upgraded our form building experience with realistic field representations!

3.4.8 (4 April 2019)

Bugs:

• Corrected an issue that sometimes caused forms with large calculations to not display properly.

3.4.7 (3 April 2019)

Bugs:

• Resolved an error that was causing form submission to fail on some php versions.

3.4.6 (2 April 2019)

Bugs:

• Resolved several issues that sometimes caused notices to be logged on newer versions of php.
• Changed the priority of the redirect action so that it should always fire last.
• Calculations should now have more consistent results when numbers are input in international formats.

Changes:

• The following field types have been deprecated: Product, Quantity, Shipping, Total.

3.4.5 (19 March 2019)

Changes:

• Upgrade to THREE for legacy users will no longer immediately trigger additional required updates.
• Introducing SendWP – A dedicated WordPress email solution!

3.4.4 (13 February 2019)

Bugs:

• Resolved an issue that was sometimes causing the submission sequence to reset.

3.4.3 (5 February 2019)

Bugs:

• Resolved an issue that was causing some form imports to fail.
• Submission exports of checkbox fields that have been modified by an admin should now display their proper value in the csv.
• Resolved an issue that was rarely causing actions to fire twice.

3.4.2 (17 January 2019)

Bugs:

• Resolved an issue that sometimes caused fields to not appear on the form after publish. (Special thanks to Tim de Hoog and Sidekick-IT).

3.4.1 (15 January 2019)

Bugs:

• Corrected an error that was causing form duplication to fail.
• Sites with WP_DEBUG enabled should no longer display an undefined ‘maintenance’ column error on form load.

3.4.0 (14 January 2019)

Changes:

• Implemented a new import process, which should be more reliable with large form imports.
• Upgraded our data structure to reduce loading times for forms and the form builder.

3.3.21.4 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

3.3.21.3 (10 January 2019)

Security:

• (2.9x) Duplicated previous blind SQL injection patch for our deprecated 2.9x codebase. Many thanks to Plugin Vulnerabilities for reporting that our initial pass missed this.

3.3.21.2 (7 January 2019)

Security:

• Patched a blind SQL injection vulnerability in the search filter on our submissions page. Thank you to Samuel Anttila at netsec.expert for practicing responsible disclosure.

3.3.21.1 (3 January 2019)

Security:

• Patched a reflected XSS vulnerability in our administrative dashboard. Thank you to Samuel Anttila at netsec.expert for practicing responsible disclosure.

3.3.21 (2 January 2019)

Bugs:

• Resolved an issue that caused our Gutenberg Block to not dispaly in the post editor when the Twenty Nineteen theme is active.

Changes:

• Product and quantity field merge tags can no longer be referenced in calculations.

3.3.20 (6 December 2018)

Changes:

• Finalized the Gutenberg block. (No longer a Beta feature.)

3.3.19.1 (29 November 2018)

Security:

• Patched an open redirect vulnerability using a url parameter in our submission download page. Thank you to Muhammad Talha Khan for practicing responsible disclosure.

3.3.19 (20 November 2018)

Bugs:

• Placeholder text should now be visible in number fields that have a minimum value.
• Corrected an error that was sometimes causing number fields to clear themselves when Multi-part Forms is active.

Changes:

• The rich text editor in the form builder should now wrap lines while in code view.

3.3.18 (14 November 2018)

Security:

• Patched a redirect XSS vulnerability using code injection on our submissions page. Thank you to Muhammad Talha Khan for practicing responsible disclosure.

Bugs:

• Resolved an issue where the WordPress is_search function was being called incorrectly in some cases.
• Custom columns should no longer be added to non-Ninja Forms custom post types with meta values containing ‘_field’.
• Resolved an issue that sometimes caused error log entries related to an invalid IP.
• The form selector on the submissions page should now be visible on mobile devices.
• Resolved an issue that sometimes caused CSV exports to have multiple header rows.

3.3.17 (16 October 2018)

Bugs:

• Pressing the tab key while in the delete a form modal should now shift focus to the delete button.
• Resolved an issue that could have caused some display issues on the dashboard due to cached scripts.

Changes:

• Updated several of our product images on the apps & integrations tab of the dashboard.
• Our in-app marketing feed will now fetch from a remote site for more swift product updates.
• Ninja Shop has arrived!

3.3.16 (17 September 2018)

Bugs:

• Resolved an issue that was sometimes causing upgrades on multi-site to delete forms from other sites on the installation.
• Corrected a bad reference in our Create a Post template documentation.
• List field values sent in an email via CSV should no longer display as NULL if their value was 0.
• Resolved a couple issues that were causing server warnings.

Changes:

• Removed some outdated objects to improve speed of publish.
• Added modal on downgrade to prevent accidental usage.
• Password fields have been deprecated in Ninja Forms core. Some of our add-ons will still utilize them.

3.3.15 (31 August 2018)

Bugs:

• Fixed an issue causing errors when forms containing checkboxes had csv files attached to Email Actions

3.3.14.1 (28 August 2018)

Security:

• Corrected patch for CSV injection vulnerability to include a previously overlooked input.

3.3.14 (27 August 2018)

Security:

• Patched an XSS vulnerability that allowed javascript injection into the form import function. Many thanks to Adam Roberts for practicing responsible disclosure.
• Patched a CSV injection vulnerability that allowed user values to run some scripts when opening exported CSV files with Excel.

Bugs:

• The selector in the add a form modal should now scroll properly instead of being cut off by the bottom of the browser when it contains a large number of forms.
• Resolved an issue that sometimes caused the character limit option for paragraph fields to count words instead.

3.3.13 (8 August 2018)

Changes:

• Added the abililty to have no default value for Country and State fields.
• Added the Indian Rupee to the list of available currencies
• Removed unnecessary comments from the main field template

Bugs:

• User Meta Tags will no longer print out the tag when users are not logged in

3.3.12 (31 July 2018)

Bugs:

• Resolved an issue that sometimes caused form titles to not display in dropdown menus.

3.3.11 (23 July 2018)

Changes:

• Updated save methods for form settings to reduce potential encoding errors.

3.3.10 (16 July 2018)

Bugs:

• (Beta) The Ninja Forms Gutenberg block should now work properly on the newest version of Gutenberg.
• Min and max values for number fields should once more accept decimal values.
• Resolved an issue that was sometimes causing a description text block to be output, even if it contained no text.
• Radio lists should now properly display the default value when using our opinionated styles.

3.3.9 (6 July 2018)

Security:

• Patched a vulnerability that could allow certain Export Personal Data requests to retrieve unrelated submission data.

Bugs:

• Fixed a broken image link in the Edit User Profile template.
• Resolved an issue that was very rarely causing the conversion process to run again after upgrade, removing all forms but the default Contact Me.

3.3.8 (2 July 2018)

Bugs:

• The styling of the Ninja Forms settings page has been corrected.
• Forms can once again be previewed before they have been published.
• Resolved an issue that was sometimes causing submission expiration to not register properly on publish.
• The submission expiration setting will no longer accept a negative number as valid input.

Changes:

• Ninja Forms has migrated to GitLab! All repository links should now be updated.
• Added an expired submissions cleanup button to our settings page to supplement cleanup on sites with a large number of submissions.

3.3.7 (21 June 2018)

Bugs:

• Submissions removed by the expired submissions feature should now be moved to the trash instead of completely removed.

3.3.6 (20 June 2018)

Bugs:

• Resolved an issue that sometimes caused the form builder to crash when deleting a field.

3.3.5 (18 June 2018)

Bugs:

• Made some performance updates to several of our popup modals.
• The agency remove marketing hook should now properly hide the new services tab.

Changes:

• Fields now display admin labels (if they exist) instead of labels in the record submission action settings.
• Added a tooltip to the value section of list fields, giving details about allowed characters.
• List field merge tags can now be configured to show labels instead of values by appending “:label” to the merge tag.
• The record submission action can now be configured to remove submissions that exceed a defined timeframe.
• Added a confirm modal to field deletion to prevent accidental removal of data.

3.3.4 (11 June 2018)

Bugs:

• Resolved an issue that was preventing placeholder text from appearing in paragraph text fields.

Chnages:

• Unlocked the services tab.
• (Beta) Ninja Forms Add-on Manager is now available.
• Ninja Mail – Transactional Email is now available.

3.3.3 (5 June 2018)

Bugs:

• Resolved an issue that sometimes caused our opt-in modal to become undismissable.

3.3.2 (4 June 2018)

Bugs:

• Fields that do not actually save data should no longer appear in the include/exclude fields list for the record submission action.
• Improved performance of our Add Form modal in the post editor.
• Resolved an issue that sometimes caused the Submissions page to display as a white screen.

Changes:

• (GDPR) Fields excluded by the record submission action will now show their values as (redacted) in the edit submission screen, rather than displaying nothing.
• (GDPR) The delete data request action now includes a setting to specify anonimization of Ninja Forms data, rather than full deletion.
• (GDPR) Fields now have a setting to specify if they are personally identifiable data.
• Registered a cleanup process to take care of some outdated and unnecessary data we have been storing in various data records.
• Added several ARIA attributes to the fields that were missing them.
• The Delete All Data button now cleans up several additional options that we’d recently added.
• The list of actions in the form builder has been updated, and non-enabled actions now include a short blurb describing their usage.

3.3.1 (22 May 2018)

Bugs:

• Removed a fatal error caused by having a WordPress version below 4.9.6.
• Export personal data requests created by anonymous uers through Ninja Forms should no longer error out in the admin.
• Updated a setting in our submissions to prevent them from being shown in archives created by WordPress.

3.3.0 (22 May 2018)

Bugs:

• Resolved a bug that was sometimes causing clicks to not register in the admin.

Changes:

• Individual fields can now be excluded from the record submission action.
• (GDPR) The delete data request action can now be added to a form, allowing your users to request deletion of their Ninja Forms submissions.
• (GDPR) The export data request action can now be added to a form, allowing your users to request a record of their Ninja Forms submissions.
• (GDPR) Added templates for data removal and data export requests.
• (GDPR) Added a suggested privacy policy content block for the use of Ninja Forms.
• (GDPR) We’ve updated our Ninja Forms opt-in/opt-out behavior for anonymous usage statistics.
• (Developers) We’ve added a layout of our database structure to our public repository.

3.2.28 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

3.2.27 (11 May 2018)

Bugs:

• Date fields should no longer fail validation if their format is set to the default setting.

3.2.26 (10 May 2018)

Bugs:

• Resolved an issue that was sometimes causing date fields to always fail validation.

3.2.25 (8 May 2018)

Bugs:

• Date fields should now properly recognize date format for validation purposes.
• Resolved an issue that sometimes caused collect payment actions to fail.
• Removed the random error text that sometimes appeared on form export.
• Resolved an issue that sometimes caused the contents of plain text emails to not display properly in the form builder.

3.2.24 (30 April 2018)

Bugs:

• Hidden fields should no longer be hidden in the form builder.

3.2.23 (26 April 2018)

Bugs:

• Resolved an issue that was causing an error in the console while using Safari.
• Fixed a bug that sometimes caused fields to not display properly when their labels contained non-ASCII characters.
• Resolved an issue that caused an error message to appear in the dashboard on older PHP versions.

Changes:

• New form templates are here!

3.2.22 (23 April 2018)

Bugs:

• List field values will no longer disallow spaces as valid input.
• Options can now be properly added to duplicated list fields.
• Resolved an issue that caused the save table settings in the form builder to display no text in Firefox.
• Fixed a spacing issue for field labels set to be hidden in our opinionated styles.

Changes:

• List fields will now output labels instead of values in the {fields_table} and {all_fields_table} merge tags.

3.2.21 (6 April 2018)

Bugs:

• Resolved an issue with the automatic update process.

3.2.20 (6 April 2018)

Bugs:

• Resolved a bug that was sometimes causing form submission to fail.

3.2.19 (5 April 2018)

Bugs:

• Resolved an issue that was causing the save progress table settings to not display properly in the form builder.
• Resolved a long-standing bug that rarely caused form submissions to fail.

Changes:

• Added Akismet Anti-Spam integration.
• Updated form deletion process to warn admins that all submissions for that form will also be deleted.
• Users below PHP version 5.6 will now be seeing a notice, informing them of the outdated version.

3.2.18 (27 March 2018)

Bugs:

• Resolved an issue that was preventing merge tags from being properly input into some settings.

3.2.17 (26 March 2018)

Bugs:

• Form data should now be properly deleted when rolling back to 2.9x and then re-upgrading.
• Resolved an issue that was causing the first publish after upgrade to fail.
• Forms set to clear but not hide after submission should now properly show reCaptcha fields after the clear.
• Resolved an issue that sometimes caused long forms to not publish properly.
• Removed a rogue plus sign that was causing php warnings in the post editor.
• Resolved an issue that was sometimes causing calculation values to display as 0 in submissions.

Changes:

• Trashed submissions are now visible, allowing them to be deleted permanently before the typical expiration period for trashed posts.
• Added a “Move to Trash” button to the edit submission screen.
• Removed some legacy code in our merge tag system that was contributing to increased admin page load times.
• The “Remove ALL Ninja Forms data upon uninstall” checkbox has been replaced with a button, which allows us to run a more efficient cleanup process.
• Email fields should now do a better job of catching invalid values before submission.
• Form autocomplete is here!
• (Beta) Added filtering to the form selector in the Gutenberg block.
• List values now have a more strict filter to prevent errors caused by special characters.

3.2.16 (27 February 2018)

Bugs:

• Fixed a bug that was sometimes causing no actions to fire upon form submission.
• Resolved an issue that was causing hidden fields to be visible if they contained a calculated value.

3.2.15 (26 February 2018)

Security:

• Patched a potential parameter tampering vulnerability.

Bugs:

• Fixed an issue that was sometimes causing decimal place values to not be honored in calculations after submission.
• Parts should now properly validate individually if the option is enabled in the Multi-part Forms add-on settings.
• User meta merge tags should no longer display at all for logged out users.
• Resolved an issue that was causing the star rating field’s label setting to be uneditable.

Changes:

• (Beta) Updated the Gutenberg block to output the selected form within the editor for display purposes.
• Added a form filter to submissions and exports, allowing for more rapid selection of the intended form.

3.2.14 (20 February 2018)

Security:

• Patched a potential XSS vulnerability. Many thanks to Kasper Karlsson at Omegapoint for practicing responsible disclosure.

Bugs:

• Resolved an issue that was sometimes causing code snippets to appear on form display.
• Newly created date fields should now no longer contain a timestamp in their default display setting.
• Star rating fields should now be properly caught by required field validation.
• Default values of star rating fields should no longer be considered “valid” for required field validation.
• Single checkbox fields can now be edited in the submission edit screen again.
• Resolved an issue that sometimes caused single checkbox fields to not display a value in exports.
• Field and calculation merge tags can now be used in the same HTML field.
• Images can once again be used in help text values.

3.2.13 (14 February 2018)

Bugs:

• Resolved an issue that caused recently published forms to not display in Internet Explorer.

3.2.12 (13 February 2018)

Bugs:

• Localized several strings for translation that had previously been missed.
• Radio and checkbox lists will now properly save updates made on the edit submission page.
• Resolved an issue that sometimes caused excessive page load times in the WordPress admin.

Changes:

• (Beta) Added a Gutenberg block to replace the shortcode when Gutenberg is active.

3.2.11 (26 January 2018)

Bugs:

• Resolved an error that sometimes caused PHP warnings on certain admin pages.
• Help text should now display properly again.

Changes:

• Updated translation packs for Spanish (Spain and Mexico), courtesy of Jesus Garcia.

3.2.10 (23 January 2018)

Bugs:

• Fixed an issue that sometimes caused forms to not display after publish.
• Calculations with a decimal setting of 0 should now properly round to 0 decimal places instead of the default 2.
• Fixed a bug that was causing some settings boxes to contain seemingly random snippets of code.

3.2.9 (17 January 2018)

Bugs:

• Resolved an issue that sometimes caused certain Categories to not appear in the terms list field.
• Fixed a visual bug where drop downs in CRM actions were seemingly being reset to the default option on page refresh.

3.2.8 (4 January 2018)

Bugs:

• Resolved an issue that sometimes caused Forms to not load in the Dashboard.

Changes:

• Made some minor tweaks to improve the loading and processing efficiency of certain admin pages.

3.2.7 (3 January 2018)

Bugs:

• Submissions of duplicated forms should now properly increment their sequence number.
• The merge tag selector box should now detect the lower edge of the window and shift upwards accordingly.
• Resolved an issue that was causing input masks on required fields to throw an error on focus.
• Fields with currency input masks should now properly save data upon submission.
• Resolved several lingering PHP errors and warnings.
• Checkbox list and radio list fields with wrapped values should now display properly.
• Wrapped labels for single checkbox fields should now display properly.
• Resolved an issue that was causing strictly numeric custom input masks with more than 12 characters to display improperly.

Changes:

• Added custom checked and unchecked value settings to checkbox fields.
• The calendar in the date field is now translatable.

3.2.6 (13 December 2017)

Bugs:

• Fixed an issue that was breaking form display when multi-select fields had no pre-selected values.

3.2.5 (13 December 2017)

Bugs:

• Submission searching should now work in WordPress version 4.8.3 and above.
• Fixed an issue that sometimes caused forms not to publish after deleting a field.
• Fixed a bug that was causing User Management to sometimes not properly set default user meta values.
• Fixed a compatibility issue with the add a form widget in PHP 7.2.
• Fixed an issue that caused Ninja Forms to crash on activation with a PHP version missing the Parser Functions package.
• Fixed a bug that sometimes caused too many database calls on pages where multiple JavaScript errors were present.
• Fixed a bug that sometimes caused a Request Entity Too Large error on form publish.
• Fixed an issue that caused the Add Form button to sometimes display improperly on smaller screens.

Changes:

• Added an option to ignore UTF-8 encoding on export/import, which can correct forms importing with no field data.
• Updated the format of submission dates to match that of the WordPress install.
• Updated the custom field template file path so that it should now properly pull from child themes when active.

3.2.4 (7 November 2017)

Bugs:

• Multi-select fields can now be updated in the submission edit page.
• Modified number fields to better handle rounding numbers with decimals.

Changes:

• Added the GNU license file.

3.2.3 (19 October 2017)

Bugs:

• Fixed a bug that caused some 2.9.x to 3.0 conversion to fail.

3.2.2 (12 October 2017)

Bugs:

• Required field validation should now work properly with the Layout and Styles add-on.
• The email action now removes extra comma separators from email settings like(To, BCC, CC, reply-to, and from address’).
• The date range on the submissions table will now show the correct submissions for the selected dates.
• Fixed a bug that was causing form imports with extra characters at the beginning to break.
• Forms that fail to load on the front-end will now remove the loading animation from the page.
• Calculations will display correctly on the front end in HTML fields if the Save Progress add-on is active on sites.
• The decimal setting in calculations will no longer break if non-numeric values are input into them.
• Unique fields will no longer try to validate deleted submissions.
• Country fields should now be sorted alphabetically in non-English languages.
• Calculations decimal setting now defaults to 2 decimal places if the setting is left empty.
• Fixed “This is not a required field” to read “This IS a required field” in Spanish locales.
• Added translatable text for the (of) in the input limit text.

Changes:

• Created a merge tag for custom user meta. This will allow users to do things like pre-populate fields with custom user meta.
• Added placeholder for date field.
• We now have currency support for South African Rand(ZAR).
• Added support for setting number of rows shown on a multi-select list on the front end.
• Created a confirm field. This will allow users to map another field on their form to it and will validate the input on the front end with the field it is mapped to.
• Added a new merge tag for submission time. This will display the time the form was submitted.
• Added WordPress filter to disable all Ninja Forms in app sales banners.
• The merge tag selector can now be used in the body of HTML fields.

3.2.1 (14 September 2017)

Bugs:

• Fixed a bug that caused opt-ins to show incorrectly.
• Multiple Google reCaptchas on the same page should function properly.
• Fixed the layout of description text for checkbox lists.
• New lines in rich text areas should convert properly from version 2.9.x.
• Merge Tag insertion should maintain the proper cursor position in all cases.
• Form duplication should happen much more quickly.
• Unknown field types will be removed upon upgrade to prevent forms from breaking in 3.0.
• Fixed several issues with converting merge tags from version 2.9.x to 3.0.

Changes:

• A portion of users will begin to see upgrade notices for Ninja Forms 3.0. The number of users who see this notice will increase in future releases.
• “Currency” has been added to the list of input mask options.
• Basic error logging has been added to Ninja Forms; the “Get Help” page will now show the most recently recorded errors.
• Added a setting for changing stat opt-in tracking.
• License activation errors will now show more detail.

3.2 (14 September 2017)

Bugs:

• Multiple Google reCaptchas on the same page should function properly.
• Fixed the layout of description text for checkbox lists.
• New lines in rich text areas should convert properly from version 2.9.x.
• Merge Tag insertion should maintain the proper cursor position in all cases.
• Form duplication should happen much more quickly.
• Unknown field types will be removed upon upgrade to prevent forms from breaking in 3.0.
• Fixed several issues with converting merge tags from version 2.9.x to 3.0.

Changes:

• “Currency” has been added to the list of input mask options.
• Basic error logging has been added to Ninja Forms; the “Get Help” page will now show the most recently recorded errors.
• Added a setting for changing stat opt-in tracking.
• License activation errors will now show more detail.

3.1.10 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

3.1.9 (04 August 2017)

Bugs:

• Fixed a bug that caused form submissions to fail with an NF_ESO_PARSER error.
• The nf_sub_seq_num shortcode should now be properly converted when upgrading from 2.9.x to 3.0.
• bcc and cc fields in email actions should convert properly when upgrading from 2.9.x to 3.0.
• Clicking on icons and buttons in the builder should be much more consistent.
• Scrolling in the drawer should work properly when viewing the form builder on a mobile device.
• Fixed a bug that prevented the drawer from opening when editing a duplicated list field.

3.1.8 (01 August 2017)

Features:

• You can now limit form submissions based upon unique fields.

Changes:

• Simplified the collect payment action by making it easier to set a paymen total.
• Form titles should appear in form export filenames.
• Added a filter to submissions table view labels.
• Removed the wrapper class for the ReCaptcha field.
• WordPress date settings are now the default for datepicker fields.
• Condensed admin notices into an easier to dismiss format.
• Links to media files entered into the RTE for actions should now use the title of that media item.
• Added a confirm dialog to the rollback button.
• Term merge tags should use the term label now, rather than the ID.
• Added a minimum WordPress version check to the Get Help->System Status page.

Bugs:

• Fixed a bug that could cause the dashboard to fail to display.
• Updated form templates for consistency.
• Email action errors should only show to admin users who are logged-in.
• Translation of submission labels and text should work properly.
• Password fields should not save in the database.
• Empty h3 tags are no longer output when a form title is empty.
• Merge tags should work more consistently in all contexts.
• The delete animation on the dashboard should be clearer.
• Fixed conflicts with other plugins using our EOS math library.
• Created On dates for imported and duplicated forms should reflect the current date.
• Fixed a bug with calculations that could cause a NaN error in JavaScript.
• Merge tags should work properly when previewing a form with unpublished changes.

3.1.7 (01 August 2017)

Features:

• You can now limit form submissions based upon unique fields.

Changes:

• Simplified the collect payment action by making it easier to set a paymen total.
• Form titles should appear in form export filenames.
• Added a filter to submissions table view labels.
• Removed the wrapper class for the ReCaptcha field.
• WordPress date settings are now the default for datepicker fields.
• Condensed admin notices into an easier to dismiss format.
• Links to media files entered into the RTE for actions should now use the title of that media item.
• Added a confirm dialog to the rollback button.
• Term merge tags should use the term label now, rather than the ID.
• Added a minimum WordPress version check to the Get Help->System Status page.

Bugs:

• Updated form templates for consistency.
• Email action errors should only show to admin users who are logged-in.
• Translation of submission labels and text should work properly.
• Password fields should not save in the database.
• Empty h3 tags are no longer output when a form title is empty.
• Merge tags should work more consistently in all contexts.
• The delete animation on the dashboard should be clearer.
• Fixed conflicts with other plugins using our EOS math library.
• Created On dates for imported and duplicated forms should reflect the current date.
• Fixed a bug with calculations that could cause a NaN error in JavaScript.
• Merge tags should work properly when previewing a form with unpublished changes.

3.1.6 (26 June 2017)

Bugs:

• Fixed a bug that could cause Recurly and Stripe add-ons to fail.
• Fixed a bug with bad form titles that could cause the form dashboard to crash.
• Calculations with whitespaces should be better handled on the front-end.
• Checkbox label positioning should be correct in all setups.
• Form deletion confirmation modal should now be styled correctly.

3.1.5 (21 June 2017)

Bugs:

• Empty Calculation rounding settings should now default to 2.
• Using post meta merge tags should now work with other post merge tags.
• Star Rating fields now have admin key settings.
• Form cache should now be properly removed when a field is deleted.
• The “New Form” button should now show when creating a new post or page.
• HTML fields should now show properly in merge tags.
• Fixed a bug with the LogLevel class.
• Querystring merge tags should now be empty rather than showing {querystring:foo} when no querystring is present.
• Date Created should now be more accurate in all contexts.
• Fixed a bug that could cause forms to fail to render on the front-end when themes passed content through wpautop.

3.1.4 (06 June 2017)

Bugs:

• Fixed a possible memory leak that could cause the builder to crash if the settings drawer was opened multiple times.

3.1.3 (31 May 2017)

Bugs:

• Users should be able to re-submit forms that fail initial anti-spam checks.
• Fixed some bugs related to calculations and submission.

Changes:

• Added sortable icons to the forms dashboard.

3.1.2 (16 May 2017)

Bugs:

• Fixed several possible PHP notices.
• Fixed a possible conflict with the bbPress plugin.
• Editing submissions with Checkbox List fields should work properly.
• Product fields with costs over 1000 should now work properly.
• Fixed a bug that caused duplicate submissions if a form wasn’t hidden after submission.

Changes:

• Forms should be sorted by title in the dashboard and the submissions page.

3.1.1 (02 May 2017)

Bugs:

• Fixed bugs in the new Merge Tag UI that prevented it from being opened properly via clicks.

3.1 (02 May 2017)

Changes:

• Added a dashboard view for forms, removing the “All Forms” and “Add New” submenus.
• All new Merge Tag UI for inserting Merge Tags into forms and actions.
• Refactored calculations, as well as adding an option to set calculation rounding.
• Updated the WordPress.org readme file.
• Opening the “new form” page should automatically open the drawer to add new fields.

Bugs:

• Fixed several bugs with calculations and locales that use non-American thousands and decimal separators.
• Products with a price over 999 should now render and calculate properly.
• Editing a submission and using a single quote should not break the submission editor.
• Fixed several PHP notices.
• After successful submission, the page should only scroll to the success message if it is not fully visible.
• Inline email validation should work properly for longer email domains, i.e. @liverpool.ac.uk

3.0.34.2 (14 June 2022)

Security Enhancements
* Apply more strict sanitization to merge tag values

3.0.34.1 (25 April 2017)

Security:

• Fixed a possible security export related to WP Sessions. Please update as soon as possible.

3.0.34 (18 April 2017)

Bugs:

• Fixed a bug that could cause emails to fail with a 500 internal server error.

3.0.33 (11 April 2017)

Changes:

• Added an admin warning notice if Contact Form 7 is installed.
• Users who upgrade to version 3.0 will now see an admin notice instructing them to check their converted forms.
• Added the TLS version, if installed, to the get help page.
• Fixed a bug that could cause a PHP fatal error with older, insecure versions of PHP.

Bugs:

• Fixed a bug that caused field labels to be output multiple times in submission exports.
• Removed several PHP Warnings related to publishing longer forms.
• Updated inline email check so that it should work on longer domains, i.e. co.uk.
• Editing submissions with single checkboxes should now save properly.
• Fields should be properly sorted in CSV files attached to emails.
• Sequential IDs for submissions on converted or imported forms should not reset.

3.0.32 (11 April 2017)

Changes:

• Added an admin warning notice if Contact Form 7 is installed.
• Users who upgrade to version 3.0 will now see an admin notice instructing them to check their converted forms.
• Added the TLS version, if installed, to the get help page.

Bugs:

• Fixed a bug that caused field labels to be output multiple times in submission exports.
• Removed several PHP Warnings related to publishing longer forms.
• Updated inline email check so that it should work on longer domains, i.e. co.uk.
• Editing submissions with single checkboxes should now save properly.
• Fields should be properly sorted in CSV files attached to emails.
• Sequential IDs for submissions on converted or imported forms should not reset.

3.0.31 (07 March 2017)

Bugs:

• Confirmed password fields should work properly.
• Fixed a bug with List Fields that caused the Import button to overlap the Add New button.
• Closed a possible security vulnerability by escaping HTML in the builder.
• CSV files should now be deleted from the server after they are emailed when attached to an email action.

Changes:

• Added a filter so that add-ons and custom code can add forms to the templates section of the New Form builder.

3.0.30 (28 February 2017)

Bugs:

• Publishing a form should now populate the backup database properly in all environments.
• Editing submissions that have selects or other lists should now work properly.

Changes:

• Added Trello to the available actions list.
• Added a JS exception catcher to help debug when forms don’t display because of JS errors.

3.0.29 (21 February 2017)

Bugs:

• Fixed a bug that could cause previewed forms from submitting properly.

3.0.28 (21 February 2017)

Bugs:

• Fixed a JS notice caused by the use of jQuery.attr() instead of jQuery.prop().
• Modified the approach to form publishing to improve performance for larger forms and prevent bugs when saving.
• Google reCaptcha should now work properly when a field has an error.

Changes:

• Added a jQuery event: “nfFormReady” to the document that can be used to fire JS code when a form has loaded.
• Using jQuery.val() should now properly work for Ninja Forms fields.
• Updated the update check URL for add-ons.
• Added a filter for form settings upon form display localization.

3.0.27 (2 February 2017)

Bugs:

• Field data should populate properly in all submission exports.

3.0.26 (30 January 2017)

Bugs:

• Field data should populate properly in submission exports.
• Email errors upon form submission should be clearer.
• Fixed a compatibility bug with other plugins that use the WP List Table.

3.0.26 (30 January 2017)

Bugs:

• Field data should populate properly in submission exports.
• Email errors upon form submission should be clearer.
• Fixed a compatibility bug with other plugins that use the WP List Table.

3.0.25 (26 January 2017)

Changes:

• Increasing the performance of submissions and form builder loading.
• Improved compatibility with popular caching plugins.

Bugs:

• Field tags should now properly populate in calculation merge tags.
• Submission exports should now always order properly.
• Fixed a bug with submissions exporting non-Ninja Forms data.
• Importing forms with non-UTF8 characters should now import properly.
• Fixed a bug with converting forms from 2.9.x to 3.0.

3.0.24 (15 January 2017)

Bugs:

• Fixed a bug with Google reCaptcha and the deprecated, 2.9.x codebase.

3.0.23 (12 January 2017)

Bugs:

• Fixed a bug with form duplication.

3.0.22 (11 January 2017)

Bugs:

• Fixed a bug that caused installations to crash on older, insecure versions of PHP.

3.0.21 (11 January 2017)

Changes:

• Added an import for list options.
• Refactored form submissions so that they are more responsive for longer forms with more submissions.
• Moved the ‘reply_to’ setting to the primary section in email actions.
• Added error handling for invalid “TO” email addresses.

Bugs:

• Fixed a bug with calculations that caused brackets to appear in calculation fields.
• On/off settings should now save properly in all situations.
• Dragging a field should now properly scroll the screen.

3.0.20 (21 December 2016)

Changes:

• Added a prompt before deleting forms on the all-forms table.
• Added the ability to use: {field:name} <{field:email}> to get Name – Address formatting in email actions CC, BCC, Reply-To Field.
• Updated the third-party EDD library.
• Removed references to the modernizer library from the builder.
• Added Twilio and Videomail to the list of available actions.

Bugs:

• Fixed a bug that caused fields to be out of order when exporting or editing submissions.
• Product fields should now respect locale-specific number formating.
• Fixed a bug with restarting form submit. This caused issues with PayPal Express and other add-ons.
• When adding new list options, the ‘value’ should auto-populate from ‘label’ setting.
• The tab order for list options should now work properly.

3.0.19 (07 December 2016)

Bugs:

• Product, Shipping, and Total fields should now work in all locales.
• Fixed a major bug preventing forms with date fields from showing in some instances.

3.0.18 (06 December 2016)

Bugs:

• Fixed a bug with 3.0.17 and the deprecated code base.

3.0.17 (06 December 2016)

Bugs:

• When using the RTE setting on the textarea field, the media button should show on all themes.
• The Modernizr library should only be loaded if you are using the RTE on the front-end.
• System date merge tag should respect the date format plugin setting.
• Exported submissions should always have correct order.
• Fixed a bug with list fields that caused the wrong one to be selected if calc values are used.
• HTML entered into field and list option labels should be rendered properly.
• Fixed a bug that caused the date picker to fail on the front-end.
• Filtering field values before display should now work properly in all instances.
• Help text should always render properly on the front-end.
• Fixed a bug with rendering the ReCaptcha field in the 2.9.x codebase.
• Error messages should work properly when displaying multiple forms on the same page.

Changes:

• The browser should scroll to the success message after a form is submitted.
• Added a label to the ReCaptcha field.
• Added decimal date seperators (MM.DD.YYYY, YYYY.MM.DD, etc.) to the date field setting.
• Sending initial data to api.ninjaforms.com for users who have opted in.
• Added the $sub_id data to the ninja_forms_custom_columns filter.
• Field selectors in the builder should always show the “nicename” of the field rather than the programmatic name.

3.0.16 (21 November 2016)

Bugs:

• Fixed a bug with export values and the Country Field to show full labels as opposed to abbreviations.
• Fixed a bug with duplicate field keys when duplicating a field.
• Fixed a bug with merge tags not being replaced in actions.
• Fixed a bug with unknown field types.
• Fixed a bug with capabilities and granting access to forms and submissions.
• Fixed a bug with restricting decimal steps in the number fields ( i.e. set increments by .01 ).
• Fixed a bug with reCaptcha validation not halting the form submission.
• Fixed a bug with displaying help text on the form display.
• Fixed a bug with enqueueing the media library scripts for the rich text editor.
• Fixed a bug with the submitting button text disappearing when a form was cleared after submission.
• Fixed a bug with converting email actions with multiple emails addresses in a single setting.
• Fixed a bug with prefixing the postmeta database table with custom prefixes.
• Fixed a bug with reCaptcha not showing due to a script loading race condition.

Changes:

• Added an additional parameter for calculations to force 2 decimal rounding.
• Added a year range setting for the date field’s datepicker.
• Added a filter to email action settings before the email is sent.

3.0.15 (09 November 2016)

Bugs:

• Fixed a bug with custom field processing not updating field data properly.

Changes:

• Added better support for extensions interacting with field duplication in the builder.

3.0.14 (03 November 2016)

Bugs:

• Fixed a bug with input masks that prevented custom masks from working properly.

Changes:

• Added per-form label settings under Advanced.
• Re-instated the changes and bug-fixes in version 3.0.12 (See below)

3.0.13 (01 November 2016)

Bugs:

• Emergency release to deal with some bugs in version 3.0.12.

3.0.12 (01 November 2016)

Bugs:

• Fixed a bug with 0 (zero) values failing required validation.
• Fixed a bug with Star Rating field values displaying in reverse order.
• Fixed a bug with Success Message showing on all forms on a page.
• Fixed a bug with the Modernizr library adding extra CSS classes to the page.
• Fixed a bug with converting the Country Field from v2.9.x to v3.x.
• Fixed a bug with repeating submission sequence numbers.

Changes:

• Added empty ninja_forms_get_form_by_id() function to avoid fatal errors.
• Performance enhancements for form display and submission processing for long forms.
• Added a field ID specific field class for styling.

3.0.11 (18 October 2016)

Bugs:

• Fixed a bug with overly strict error catching that might stall form submission.

Changes:

• Updated field validation to not check required settings on unknown field types.
• Added a process to remove empty fields without field keys.

3.0.10 (18 October 2016)

Bugs:

• Fixed a bug with non-visible fields generating empty HTML on display.
• Fixed a bug with dashicons not showing for non-logged in users.
• Fixed a bug with converting fields with ‘inside’ labels.
• Fixed a bug with showing custom columns in submissions per-form.
• Fixed a bug with field IDs not properly being updated on form publish.
• Fixed a bug with the country field not displaying the country list in the form.
• Fixed a bug with formatting of textareas and merge tags.
• Fixed a bug with displaying calculation values for checkboxes and merge tags.
• Fixed a bug with duplicate fields breaking the builder and form display.
• Fixed a bug with consistency and form cache data for the builder and form display.

Changes:

• Added a hook in the JavaScript for the Pikaday datepicker.
• Removed the Submission Post Type from the Admin Bar display.
• Excluded the Submission Post Type from public query.
• Added better error reporting for 500 Internal Server Errors for troubleshooting.
• Added a cleanup routine for duplicate fields in forms.

3.0.9 (12 October 2016)

Bugs:

• Fixed a bug with loading the form builder from cache.

3.0.8 (11 October 2016)

Changes:

• Fixed a typo in the Submission Date Filter.
• Added a filter (ninja_forms_display_fields) for removing fields form display.
• Added a check for misconfigured shortcodes that break output.

Bugs:

• Fixed a bug with exporting list fields in submissions.
• Fixed a bug with outputting extra text on the submission submenu.
• Fixed a bug with importing checkbox lists and default values.
• Fixed a bug with imported forms that contain HTML in fields.
• Fixed a bug with date field formatting.
• Fixed a bug with the builder drawer not scrolling to the top when opened.
• Fixed a bug with using hidden fields in calculations.
• Fixed a bug with refreshing newsletter lists in form actions.
• Fixed a bug with field calculation values in merge tags.

3.0.7 (06 October 2016)

Changes:

• Added background processing for publishing long forms to avoid timeout errors.

3.0.6 (27 September 2016)

Changes:

• Added the $post variable to the submission info metabox.
• Suppressed HTML fields from submission data.
• Suppressed HTML fields from all fields merge tags
• Added description text to the Rollback Setting (Advanced).
• Disabled the “Edit” page link when previewing a form.
• Added a plugin wide currency setting in place of the static currency symbol setting.

Bugs:

• Fixed a bug with validating email addresses (ie properly evaluate “+”s).
• Fixed a bug with browser compatibility.
• Fixed a bug with displaying column content on other post types.
• Fixed a bug with updating form submission error messages.
• Fixed a bug with creating empty settings on activation.
• Fixed a bug with column class collisions in CSS.
• Fixed a bug with field help text not displaying on the form.

3.0.5 (13 September 2016)

Bugs:

• Fixed a bug with checking for a disabled PHP functions that might cause a fatal error.

3.0.4 (13 September 2016)

Bugs:

• Fixed a bug with aggressive CDN caching.

3.0.3 (13 September 2016)

Bugs:

• Added isInteger polyfill for IE11.
• Added deprecated functions to prevent PHP errors.
• Required fields message should now not show when the form is hidden.
• Field-specific scripts should only load when that field is present.
• Updating translatable text.
• Radio lists should no longer select an option by default.
• Conversions should be more stable.
• Text to HTML field conversion should now happen correctly.
• Fixed a conflict with Visual Composer.

3.0.2 (7 September 2016)

Bugs:

• Fixed a bug that caused PHP notices to be displayed.

3.0.1 (7 September 2016)

Changes:

• Add a deprecated notice for ninja_forms_get_all_forms function.

Bugs:

• Fixed a bug with templates.
• Fixed a bug with required field markings.

3.0 (6 September 2016)

Changes:

• Release of Ninja Forms THREE