WP Manifestindependent plugin directory
manifest / content / wp-frontend-post-submit

Frontend Post Submit

Frontend post submission for WordPress: visitors submit posts as pending drafts with honeypot + timing-trap bot protection

by Azan Umer · github.com/azanumer/wp-frontend-post-submit

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/azanumer/wp-frontend-post-submit/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/azanumer/wp-frontend-post-submit ↗

Let visitors submit posts from the frontend — no dashboard account, no admin access needed. Every submission lands as a pending post for an editor to review.

What it does

  • [frontend_post_form] shortcode: title, content, and category dropdown.
  • Submissions are always pending — nothing ever publishes without review.
  • Triple bot protection, no CAPTCHA required:
    1. WordPress nonce on every form.
    2. Honeypot field (wfps_website) — hidden from humans, filled by bots.
    3. Timing trap — forms submitted within 3 seconds of rendering are rejected.
  • Works for logged-out and logged-in visitors (admin_post_nopriv_ + admin_post_).
  • Content is filtered with wp_kses_post() (safe HTML only); titles are sanitized; categories are validated as integers.
  • On success the visitor is redirected to /?wfps=submitted.

Installation

  1. Upload the plugin folder to wp-content/plugins/ and activate it.
  2. Put [frontend_post_form] on any page. Review submissions under Posts → Pending.

License

MIT