In your registration function you had the code

wp_create_user($username, $password, $email);

so below this add the code

wp_signon(array(
    'user_login' => $username,
    'user_password' => $password,
    'remember' => true
), false);

Regards, TC

Thanks very much for your help. I’m not a coder but your help got this going.

1. How do I test for user reg failure? QuForm completes but the user never gets regd – I set wp new reg to off but there was no reg failure alert. It can happen – how do I test for failure?

2. What if signon fails – how do I test for that?

1. The Codex for wp_create_user shows what it returns when it fails. The only way to let the user know that it’s failed would be to change the success message in your registration function using $form->setSuccessMessage('...');

2. There is an example on the wp_signon Codex page…

Regards, TC

It looks like your theme or one of your plugins is replacing -- in the post content with & ndash;. So this is making it so that the comments surrounding the JavaScript are not closed properly, possibly causing both problems. If you can find the code that is causing this and remove it it should fix the problem.

Regards, TC

This one helps, thanks TC!

This is the complete code it does not go inside any other function. Replace iphorm_X_X with your Username field unique ID.

add_filter('iphorm_element_valid_iphorm_X_X', 'mytheme_custom_validator', 10, 3);

function mytheme_custom_validator($valid, $value, $element)
{
    if ($valid) {
        if (username_exists($value)) {
            $element->addError('That username is already taken');
            $valid = false;
        }
    }

    return $valid;
}

Regards, TC

It sounds like a conflict with another plugin or your theme, can you see if it works with other plugins disabled?

Regards, TC

Worked after disabling a plugin …thanks

It sounds like you have a JavaScript error on the page, can you send me a link?

Regards, TC

You’d need to add some JavaScript to simulate a click on the popup trigger. If you give your navigation the href #show-form, the following code should do it.

<script type="text/javascript">
jQuery(document).ready(function ($) {
    $('a[href="#show-form"]').click(function () {
        $('.iphorm-fancybox-link').click();
        return false;
    });
});
</script>

Regards, TC

There is no XSS vulnerability with the default value functionality, the values are escaped. There is no way to set up multi-page forms but we will be adding this in the next update.

Regards, TC

1. Yes you are right, they shouldn’t be connected, I am planning to make this a lot more flexible.

2. So I would do it like this, so you can use the same form for submitting and editing. Make the link to edit have a URL paramater with the ID of the post you want to edit.

http://www.example.com/form/?id=5

Like I explained in the post before, set the title and content fields to have “Dynamic default value” ticked and set the Parameter names to “title” and “content”. I’d also add a new Hidden field to save the ID of the post you are editing. In the Hidden field settings, Optional tab tick “Dynamic default value” and enter id as the parameter name, you’ll need to find the unique ID of this element which isn’t shown in the form builder, once you’ve added this element to the form, view the source of the page (when viewing the form on a page on your site) and search for <input type="hidden" you are looking for a field with the attribute name="iphorm_X_X", this is the unique ID.

In your theme functions.php file add the code to populate these fields if the post ID is set in the URL .

add_filter('iphorm_element_value_title', 'mytheme_set_title');

function mytheme_set_title($value)
{
    if (isset($_GET['id'])) {
        $post = wp_get_single_post($_GET['id']);
        if (!empty($post)) {
            return $post->post_content;
        }
    }
}

add_filter('iphorm_element_value_content', 'mytheme_set_content');

function mytheme_set_content($value)
{
    if (isset($_GET['id'])) {
        $post = wp_get_single_post($_GET['id']);
        if (!empty($post)) {
            return $post->post_title;
        }
    }
}

add_filter('iphorm_element_value_id', 'mytheme_set_id');

function mytheme_set_id($value)
{
    if (isset($_GET['id'])) {
        return $_GET['id'];
    }
}

Now modify your post process function, that you used to create the post, but this time check if the Hidden field has a post ID in it, if it does we edit the post.

add_action('iphorm_post_process_1', 'mytheme_create_wp_post', 10, 1);

function mytheme_create_wp_post($form)
{
    $id = absint($form->getValue('iphorm_X_X')); // Change to your Hidden field unique ID
    $title = $form->getValue('iphorm_X_X'); // Change to your Title field unique ID
    $content = $form->getValue('iphorm_X_X'); // Change to your Content field unique ID

    $post = array(
        'post_title' => $title,
        'post_content' => $content
    );

    if ($id) {
        // ID was set so we tell WP to update the post with this ID
        $post['ID'] = $id;
    }

    wp_insert_post($post);
}

Note: this has security implications, now anybody can edit or add a post without permission, so you may want to add capability checks to these functions.

Also this is untested, but it will hopefully be enough to get you started.

Regards, TC

Thanks for your kind words, really appreciate it

1. The license key is tied to the domain name and subdomains are treated separately so you will not be able to use the same license key.

2. Yes, assuming you only have one popup form on the page, this code should work.

<script type="text/javascript">
jQuery(window).load(function () {
    jQuery('.iphorm-fancybox-link').click();
});
</script>

Regards, TC

It’s not possible to do this now, but we will be adding it to a future version.

Regards, TC

Yes you can export the form at Quform -> Export on the WordPress admin menu, and import on the other site at Quform -> Import.

Regards, TC

It’s not possible for the user to upload a file with a .php extension if you choose the allowed file extensions in the settings. Any other security implications depend on how your web server is set up to interpret the uploaded files.

Regards, TC

1. I think so, lets say you set the WP uploads directory to one level above public_html, then in your Quform form settings you could set the path as public_html/uploads/etc to choose a folder below this. If the WP uploads directory is below public_html you wont be able to go above this.

2. If you add a Paragraph Text field and tick “Dynamic default value” in the optional settings, and set the “Parameter name” to content, you can use this code in functions.php to populate it with the current post content.

add_filter('iphorm_element_value_content', 'mytheme_set_content');

function mytheme_set_content($value)
{
    global $post;
        if (!empty($post)) {
            return $post->post_content;
        }
}

Regards, TC

1. Can you try changing the WP uploads folder, in Settings -> Media.

2. You can create a custom validator to prevent the form submitting if the username exists. your function would look like

add_filter('iphorm_element_valid_iphorm_X_X', 'mytheme_custom_validator', 10, 3);

function mytheme_custom_validator($valid, $value, $element)
{
    if ($valid) {
        if (username_exists($value)) {
            $element->addError('That username is already taken');
            $valid = false;
        }
    }

    return $valid;
}

I will update the user guide with this code. Also a full support wiki site is in the pipeline.

Regards, TC

You can customize the notification email at Settings -> Email -> Customize email content, you can insert data using the Insert variable… dropdown.

Regards, TC

thank you !! i didn’t sport that option ! thank you again !!

It sounds like it could be a JavaScript error on the page, can you send a link?

Regards, TC

At the moment, you will need to do this with PHP code: http://www.themecatcher.net/iphorm-form-builder/create-post.php

Regards, TC

The forms will work on a RTL site.

Regards, TC

Not without custom work.

Regards, TC