WP Manifestindependent plugin directory
manifest / forms / wsform-disable-checksum

WS Form Disable Checksum

WordPress plugin that disables WS Form import checksum validation, allowing hand-authored form JSON to be imported.

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wemakegood/wsform-disable-checksum/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

A tiny WordPress plugin that disables WS Form's import checksum validation, so you can import hand-authored form JSON that WS Form would otherwise reject.

Why this exists

When you export a form from WS Form, the exported JSON includes a checksum. On import, WS Form verifies that checksum to confirm the file came from WS Form and hasn't been altered. That's a sensible safeguard — but it gets in the way when you want to write or generate the import JSON yourself (for example, having Claude Code author a form definition from scratch) rather than round-tripping it through the WS Form export feature.

A hand-written file has no valid checksum, so the import fails. This plugin hooks WS Form's wsf_form_checksum_check filter and returns false, which tells WS Form to skip the check and accept the file.

What it does

add_filter( 'wsf_form_checksum_check', 'wsform_disable_checksum_check', 10, 1 );

The filter callback unconditionally returns false. While this plugin is active, all WS Form imports skip checksum validation — there is no setting and no per-form scoping.

Installation

  1. Download or clone this repository into your site's wp-content/plugins/ directory:
    wp-content/plugins/wsform-disable-checksum/
  2. Activate WS Form Disable Checksum from the Plugins screen in WordPress.
  3. Import your hand-authored JSON via WS Form's normal import flow.

Requires WS Form (free or PRO) to be installed and active — the filter does nothing on its own.

When to use it

Activate it while you're importing hand-authored or generated form JSON. Because it removes the integrity check on every import, the safe pattern is to enable it for the import, then deactivate it — leaving checksum validation in place for normal day-to-day use. It is a developer/authoring convenience, not something most sites should run permanently.

License

GPL-2.0-or-later — consistent with WordPress and WS Form.