外掛說明
Secufor FSQL intercepts form submissions and writes them to one or more MySQL
databases of your choice, so that personal data collected through your forms
never has to sit in your WordPress installation.
Features:
- Works with Forminator, Formidable Forms, WPForms and Gravity Forms.
- Connect several external databases and route each form plugin to the ones you pick.
- Optionally keep a copy inside the WordPress database.
- Optionally delete the entries the form plugin stored on its own side.
- Export any connected database to CSV from the admin.
Connection credentials are encrypted at rest with AES-256-GCM, using a key
derived from your site’s WordPress salts.
External services
Every feature of this plugin runs locally and is available without an account.
The plugin contacts no external service on its own: the only requests it makes
are the ones you trigger yourself by submitting the optional account form.
If, and only if, you fill in that form, the plugin connects to secufor.net, the
service that hosts Secufor accounts, for two things:
- Logging in: the Secufor username and password you typed are sent to
https://secufor.net/wp-json/jwt-auth/v1/tokenin exchange for an access token. - Reading your profile, using that token, from
https://secufor.net/wp-json/wp/v2/users/me. The name and email address it returns are displayed on the account screen.
The account is informational only. Logging in unlocks nothing, and logging out
or never logging in disables nothing: the form modules, the database
connections, the exports and every setting behave identically either way.
No form submission and no database credential is ever sent to secufor.net.
Service provided by Secufor: terms of use, data protection.
安裝方式
- Upload the
secufor-fsqlfolder to/wp-content/plugins/, or install the plugin through the Plugins screen. - Activate the plugin through the Plugins screen.
- Go to Secufor FSQL > Database connection and add the MySQL database you want to write to.
- Open the screen of each form plugin you use and tick the databases that should receive its submissions.
常見問題集
-
Which databases are supported?
-
MySQL and MariaDB. The plugin routes its queries through the WordPress database
layer, which only speaks MySQL. -
What happens to entries already stored by my form plugin?
-
Nothing, unless you tick “Delete the entries stored by the form plugin” on that
module’s screen. That action is irreversible. -
Do I need a Secufor account?
-
No. The plugin is fully functional without one. The account screen is purely
informational: it displays the name and email of a secufor.net account if you
choose to sign in, and no feature depends on it. -
Where are my database passwords stored?
-
In the WordPress options table, encrypted with AES-256-GCM. The key is derived
from the salts in yourwp-config.php, so a database dump alone does not reveal
them. If you regenerate your salts, you will need to re-enter the credentials.
使用者評論
這個外掛目前沒有任何使用者評論。
參與者及開發者
變更記錄
1.0.1
- Removed the remote installation check and every option derived from it. The
module screens and the database-connection screen are now always available,
independently of any network call. - Removed the remote deregistration call previously made on uninstall.
- Removed the subscription label from the account screen.
- The plugin no longer contacts any external service unless the user submits
the optional account form.
1.0.0
- First public release.
- Forminator, Formidable Forms, WPForms and Gravity Forms modules.
- Multiple external MySQL destinations per module.
- CSV export of a connected database.
- Encrypted storage of database credentials.