SignPad for Ultimate Member

SignPad for Ultimate Member is an independent WordPress extension that adds a reusable handwritten signature capture field to Ultimate Member registration and profile forms.

Users draw directly with a finger, stylus, mouse, or trackpad. Signatures are validated as PNG images, stored outside the Media Library, and delivered only through an authorised WordPress endpoint.

This project is not affiliated with or endorsed by Ultimate Member. It captures a handwritten signature; it does not guarantee legal, contractual, eIDAS, or other regulatory compliance.

Features

• Multiple signature fields on one form.
• Required and optional fields with Ultimate Member conditional logic.
• Responsive, high-DPI canvases with Undo and Clear controls.
• Configurable canvas height, pen colour, background colour, signer role, and agreement/version identifier.
• Client-side and server-side validation.
• Protected, non-Media-Library storage with authorised viewing and downloading.
• WordPress personal-data export and erasure integration.
• Optional audit metadata and configurable uninstall retention.
• No analytics, telemetry, CDN assets, or production network requests.

Requirements

• WordPress 6.5 or later.
• PHP 7.4 or later.
• A currently supported Ultimate Member release.

Installation

1. Install and activate Ultimate Member.
2. Upload a release ZIP through Plugins > Add New > Upload Plugin, or copy the plugin directory to wp-content/plugins/.
3. Activate SignPad for Ultimate Member.
4. Add the Signature field to an Ultimate Member form and assign a unique meta key to each instance.
5. Review Settings > SignPad for UM.

For the strongest storage protection, define SIGNPAD_UM_STORAGE_PATH as a dedicated writable directory outside the public web root. When the default directory is used, verify that the active web server or proxy denies direct access; nginx does not process the bundled Apache .htaccess file.

Migration and conditional forms

The plugin contains no site-specific field names or business rules. Existing image-upload fields should be migrated on staging because their previous values may be public URLs or attachment identifiers, while a SignPad field stores an opaque protected-record ID.

Ultimate Member continues to own conditional field visibility. Recreate and test the host site's existing conditions in the form builder, including every branch where a required signature may be hidden.

Development and testing

The WordPress.org-facing documentation is in readme.txt. The full manual test matrix is in TESTING.md.

Release history is recorded in CHANGELOG.md.

Before proposing a change:

1. Run PHP syntax checks across the repository.
2. Run WordPress Coding Standards using phpcs.xml.dist.
3. Run WordPress Plugin Check.
4. Exercise the WordPress Playground smoke test on PHP 7.4 and a current PHP release.
5. Complete the relevant browser, mobile, storage, privacy, and access-control tests in TESTING.md.

See CONTRIBUTING.md for contribution and disclosure guidance.

Security and privacy

Signatures are personal data. Do not use real signatures, production exports, credentials, or private site configuration in issues, pull requests, fixtures, or screenshots. Report vulnerabilities privately as described in SECURITY.md.

Public registration should use suitable host-level anti-automation and rate-limiting controls. Monitor the protected storage directory and configure retention according to the host site's privacy and legal obligations.

Hooks

• signpad_um_storage_path filters the protected absolute storage path.
• signpad_um_view_capability filters the administrator capability, which defaults to edit_users.
• signpad_um_agreement_version supplies or overrides the captured agreement/version identifier.

Licence

The plugin is licensed under GPLv2 or later. See LICENSE.

Signature Pad 5.1.3 by Szymon Nowak and contributors is bundled under the MIT License. Its licence is included at assets/js/signature_pad.LICENSE.txt.