WP Manifestindependent plugin directory
manifest / forms / shadowww-callback

Shadowww-Callback

A lightweight WordPress callback form plugin with AJAX submission, nonce protection, and honeypot anti-spam.

by Shadowwww · github.com/shadowwwproject/shadowww-callback

0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/shadowwwproject/shadowww-callback/archive/refs/heads/main.zip

A lightweight WordPress callback form plugin with AJAX submission, nonce protection, and honeypot anti-spam.


Features

  • Shortcode-based form output
  • AJAX form submission via admin-ajax.php
  • Nonce verification for CSRF protection
  • Honeypot field for basic spam filtering
  • Input sanitization using WordPress core functions
  • Works for non-logged-in users
  • No external services or dependencies

Installation

  1. Copy the shadowww-callback folder into wp-content/plugins/
  2. Activate the plugin in WordPress admin
  3. Add the shortcode [shadowwww_form] to any page or post

Configuration

Edit the recipient email address in shadowww-callback.php:

$email_to = 'youremail@domain.ru'; //CHANGE THIS ***If not set, the site admin email will be used as fallback.

Security

  • Nonce verification (wp_verify_nonce)
  • Honeypot hidden field (some-field)
  • Server-side input sanitization
  • No hardcoded credentials or secrets

Notes

This plugin represents a legacy WordPress implementation using jQuery and the jQuery Form Plugin. Modern implementations may use the Fetch API or REST endpoints instead.

***The code is provided as a demo/portfolio example. Production-specific data has been removed.


License

MIT