Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/axmadmc/amaan-inbox/archive/refs/heads/main.zipVersion 0.9.0 (open beta) · WordPress 6.0+ · PHP 7.4+ · GPLv2 or later
A free WordPress plugin that adds a secure contact form to your website and saves every message in a private inbox in your WordPress dashboard. You can read, track and reply to each message there, while spam is blocked and visitors' details stay protected.
Amaan means "safety" and "security" in Arabic and Somali.
Documentation: docs.ahmedmc.com/contact-form
Open beta: it works and is ready to try, but it's still being tested. Please try it on a staging site first and report anything that doesn't work as expected.
Why I built it
Most contact forms only forward messages to an email inbox, where they're easy to miss or lose. I wanted every message kept securely in one place on my own site, where I can track and reply to it, while protecting visitors' data.
Features
- Contact form with name, email, subject, message and an optional consent checkbox, added with the
[amaan_contact]shortcode - Messages screen with search and All, Unread, Replied, Spam and Trash views
- Email replies sent from the dashboard and saved with each message as a conversation
- Dashboard with totals, a 14-day chart, recent messages and a security checklist
- Email alert for each new message
Security and privacy
- Cloudflare Turnstile verified on the server, failing closed if the check can't be completed
- Hidden spam trap field, signed one-time form tokens and a minimum fill time
- Rate limits per visitor and per day for the whole site
- Strict input checks and protection against email header injection
- Visitor IP addresses are never stored, only a secure hash
- Only administrators can read or answer messages
- Works with WordPress's personal data export and erase tools
- Optional automatic deletion of old messages
Install
- Download the zip from Releases.
- In WordPress, go to Plugins → Add New → Upload Plugin, choose the zip and click Install Now, then Activate.
- Follow the documentation to set up email, Turnstile and the form.
Security
Please report security problems privately by email, not in a public issue. The bug report address is on the documentation page.
License
GPLv2 or later. Developed by Ahmed MC.