WS Form Disable Checksum
WordPress plugin that disables WS Form import checksum validation, allowing hand-authored form JSON to be imported.
by Make Good · github.com/wemakegood/wsform-disable-checksum · website
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/wemakegood/wsform-disable-checksum/archive/refs/heads/main.zipReadme
WS Form Disable Checksum
A tiny WordPress plugin that disables WS Form's import checksum validation, so you can import hand-authored form JSON that WS Form would otherwise reject.
Why this exists
When you export a form from WS Form, the exported JSON includes a checksum. On import, WS Form verifies that checksum to confirm the file came from WS Form and hasn't been altered. That's a sensible safeguard — but it gets in the way when you want to write or generate the import JSON yourself (for example, having Claude Code author a form definition from scratch) rather than round-tripping it through the WS Form export feature.
A hand-written file has no valid checksum, so the import fails. This plugin hooks WS Form's wsf_form_checksum_check filter and returns false, which tells WS Form to skip the check and accept the file.
What it does
add_filter( 'wsf_form_checksum_check', 'wsform_disable_checksum_check', 10, 1 );
The filter callback unconditionally returns false. While this plugin is active, all WS Form imports skip checksum validation — there is no setting and no per-form scoping.
Installation
- Download or clone this repository into your site's
wp-content/plugins/directory:wp-content/plugins/wsform-disable-checksum/ - Activate WS Form Disable Checksum from the Plugins screen in WordPress.
- Import your hand-authored JSON via WS Form's normal import flow.
Requires WS Form (free or PRO) to be installed and active — the filter does nothing on its own.
When to use it
Activate it while you're importing hand-authored or generated form JSON. Because it removes the integrity check on every import, the safe pattern is to enable it for the import, then deactivate it — leaving checksum validation in place for normal day-to-day use. It is a developer/authoring convenience, not something most sites should run permanently.
License
GPL-2.0-or-later — consistent with WordPress and WS Form.