Great stuff all around, but one question comes to my mind:
The file attachments are a great addition, but is there a way to set the attachment size limit?
That way you could prevent the mail not getting sent because it exceeds the max size.
Imagine using an SMTP that allows up to 50 MB of total size and a visitor trying to add a 60 MB attachment to the form. Without such a limitation or warning for that limit, the form will accept and try to send the mail, but the SMTP server will reject it due to its size.
To begin with we have placed hard limits on size and supported file formats, because mail services are very particular and we want this to work out the box the best it can.
5MB max file size and only PDF, JPG and PNG are supported as file attachments.
Once we get this working well, I’ll look to expand these limitations with options, but they would likely require extra documentation to help avoid problems and confusion with delivery issues.
Oh my giddy aunt! These form upgrades are mint! I can’t wait to get these implemented. The token and timed content are cracking ideas. The attachments are great. All of this is the super-functional back end stuff needed, this is the type of feature set that typically comes as a £39.99 addon with other web building systems. Really well explained. Superb!
@Norm and others regarding the Spam protection, do you pick just one? or all 3!? 1 would one of them be ok if so…..i’d like to see a detailed description in documents on what each do etc for my own knowledge so I could let clients know what I can offer etc.
really cool stuff especially about the spam. I would still write about the big missing piece - customizable email output. This is crucial for a professional forms. RW has a plugin called FormLoom 4. It is amazing what it does. If I see this in blocs it will be absolutely great.
You can have all three enabled at once, which I recommend, as you have varying degrees of intelligence with spam bots. Also new forms have them all enabled by default.
From the front end you don’t notice anything different, it’s all under the hood protections.
With the exception of the honeypot which is technically visible so the spam bot doesn’t skip it, as it would if it was hidden with css, instead it’s placed offscreen, so a visitor wouldn’t know it was there, but some spam bots will populate it.
There is extra details in the inspector on the little ? buttons.
This is so awesome @Norm! Any chance of letting us adjust the extensions for upload or at the very least allow for ZIP?
Right now I’m using Dropbox as a conduit for my own support tickets so that customers can easily add in screenshots, videos and project files.
It would be great to use a form solution instead but I need someway of allowing customers to attach a custom file extension as an attachment. But beyond this being able to add a small video file would also be helpful.
I’m thrilled to hear that you’ve already thought of attachment limits but it would also be great if we could adjust the size from 5MB to some other value as this limit will vary from provider to provider (mine allows for 10MB).
Just a heads up as well in case you haven’t run into this, at least when I was developing an SMTP mail solution within one of my own products, the limit was for the attachment plus the content of the message. So the attachment limit actually needs to be slightly less to allow for the rest of the message (but I think most folks simply still call out a round number for users like 5MB as this is too much in the weeds for many).
I think it will depend upon how creative your spammers are. My guess is that Norm’s solutions without reCAPTCHA will likely be sufficient for most. DeSpam though will give one another layer of protection in lieu of or as an additional layer on top. But I don’t think anyone will know until things get out in the wild and we can start comparing which solutions block spam the best.