Shadowww-Callback
A lightweight WordPress callback form plugin with AJAX submission, nonce protection, and honeypot anti-spam.
★ 0stars
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/shadowwwproject/shadowww-callback/archive/refs/heads/main.zipA lightweight WordPress callback form plugin with AJAX submission, nonce protection, and honeypot anti-spam.
Features
- Shortcode-based form output
- AJAX form submission via
admin-ajax.php - Nonce verification for CSRF protection
- Honeypot field for basic spam filtering
- Input sanitization using WordPress core functions
- Works for non-logged-in users
- No external services or dependencies
Installation
- Copy the
shadowww-callbackfolder intowp-content/plugins/ - Activate the plugin in WordPress admin
- Add the shortcode
[shadowwww_form]to any page or post
Configuration
Edit the recipient email address in shadowww-callback.php:
$email_to = 'youremail@domain.ru'; //CHANGE THIS ***If not set, the site admin email will be used as fallback.
Security
- Nonce verification (wp_verify_nonce)
- Honeypot hidden field (some-field)
- Server-side input sanitization
- No hardcoded credentials or secrets
Notes
This plugin represents a legacy WordPress implementation using jQuery and the jQuery Form Plugin. Modern implementations may use the Fetch API or REST endpoints instead.
***The code is provided as a demo/portfolio example. Production-specific data has been removed.
License
MIT