Code

Discussion on Gravity Forms Encrypted Fields

Discussion on Gravity Forms Encrypted Fields

Cart 3,420 sales
Recently Updated

PluginOwl supports this item

Supported

This author's response time can be up to 5 business days.

699 comments found.

Hello Team

I would like to inform you that the customer fills out the form from our website and the fields are encrypted by using Gravity Form Encryption, but due to some issues website didn’t send any notification email to us. In this way, we miss the email notification, if that email comes then we can see the actual data filled by the customer because for email body we used {gfef_decrypt_ALL+}

Now, how can we see the encrypted fields data of that customer. Please let me know asap

Thank you!

Hi

Okay, Let me check what can we do in this case.

Thank you!

Hi

I have find out the solution, and the issue with the activation process if we skip the activation process for registration user than it seems perfect. Now, when the user will registration, he will get a notification email on their email that you have been registered on the website, please reset the password and login to your account dashboard.

Is that okay?

Thank you!

Hello

Yes. Our support team previously stated it was possible when immediately activating the user multiple times. However, It still does not make the data secure to bother encrypting the user data copy stored in gravity forms when it is stored unencrypted in the same database in the WP user table. If you are not using a recommended solution through gravity view or encryptWP, Deleting the GF copy is again considered the best alternate option as you look and search for users in the WP user admin interface anyway.

I have changed the domain name for my site. How can I change the license to my new domain? I no longer have access to the old domain.

Hello

You can send us a private message by clicking our user name and using the author contact form. Include your purchase code and explicitly list the exact website you would like to deactivate, and we can deactivate it for you from our end. Any deactivated site will cease to function for decryption and other accessibility of encrypted data. DO NOT list purchase code here .. only in the private email form.

Hi

I have been using the repeating fields code for Gravity forms found here: https://docs.gravityforms.com/repeater-fields/, but the encrypted fields module causes an error on submission (even though these fields do not have encryption on them).

I think this is caused by the repeating fields part of the form being sent to submissions as an array, and your encryption module requires a string. When i dont add any content to these fields i do not receive an error.

Here is the part of the error

Fatal error: Uncaught TypeError: substr(): Argument #1 ($string) must be of type string, array ….

.../wp-content/plugins/gravity-forms-encrypted-fields/gfef.php on line 757

Any ideas on how I can fix this?

Thanks

Jonathan

Hello

Repeater fields are not currently a supported fires type.

Hello

You should be able to try this form again using repeating forms without encryption on them but able to enter data. This issue has been corrected in later plug-in versions so updating to latest plugin version should correct the issue for you

Hello,

We are interested in potentially purchasing this plugin however we need to know the following:

Are upload fields supported for the encryption capability?

Hello

First let me specify that our plug-in does not encrypt uploaded files for storage on the server. There are already great fast solutions out there for encrypted file storage and sharing/access. Read below for more information.

If you are asking about how a file is protected while in transfer from the users machine to your server on initial upload, this is the same as the data entry is protected and is done by simply using https for the connection. Https is a secured SSL encrypted connection between client and server.

As far as once it’s on your server you can use the gravity forms Dropbox add-on or a third party solution like GDrive file uploader to have the files moved to secure storage on those platforms and delete any local copy (Both are encrypted storage and offer robust sharing and access options). Or you can likely transfer to other storage and access solution via other plugins, or use a different solutions API etc. with custom programming.

If you wanted to skip the files ever being on your server at all you can use solutions like driveuploader or a google form with file upload field or another encrypted file upload solution directly within your gravity form by just embedding them in an html field in your gravity form.

I hope this helps :)

I’m interesting in purchasing this plugin to comply with cybersecurity requirements. My client is asking me how the process collects and packages a file upload for transfer. We want to make sure that there is no trace of the file on our server once it is emailed via the notification and deleted. Can you give me some details there?

Hello

First let me specify that our plug-in does not encrypt uploaded files for storage on the server. There are already great fast solutions out there for encrypted file storage and sharing/access. Read below for more information.

If you are asking about how a file is protected while in transfer from the users machine to your server on initial upload, this is the same as the data entry is protected and is done by simply using https for the connection. Https is a secured SSL encrypted connection between client and server.

As far as once it’s on your server you can use the gravity forms Dropbox add-on or a third party solution like GDrive file uploader to have the files moved to secure storage on those platforms and delete any local copy (Both are encrypted storage and offer robust sharing and access options). Or you can likely transfer to other storage and access solution via other plugins, or use a different solutions API etc. with custom programming.

If you wanted to skip the files ever being on your server at all you can use solutions like driveuploader or a google form with file upload field or another encrypted file upload solution directly within your gravity form by just embedding them in an html field in your gravity form.

I hope this helps :)

Thank you this is helpful. Can you provide any details about how the local copy of the file is deleted? Is there a possibility that even though the file was deleted it could still be accessed in the “trash”? Or is it deleted in such a way that it is gone forever?

I appreciate your help here.

Hello

Files uploaded through Gravity forms are stored in non indexed ways with obscured file names. They are deleted from the server without any “trash” option.

For more information on GF files, check the gravity forms documentation on file uploads security. You can programmatically set parameters like requiring login or certain WP permissions before download is possible on top of deletion after processing/submission so the file is further protected during processing

https://docs.gravityforms.com/security/#h-file-upload-security

Hi, I have encrypted the email field in the form and one of my notification email is sending the email to the filled email but it seems like the email is failed to send because of the email field is encrypted. Please advise how we can pass the email as decrypted data for notification email.

Here’s the setting for your reference: https://snipboard.io/QmKYPz.jpg

Hello

Please read in full and follow the plug-in instructions listed in the plugin settings page under top button “ Setup and Operation Instructions”

Step #12 covers this in detail with pictorial reference and guide video.

You must use a decrypted merge tag in this field while selecting the “enter email” option for the notification email. The field data (email address) is encrypted so it must be decrypted to make a readable email to send to.

Hi, I have tried to add my user role to User/Role View Permission in form editor but it doesn’t let the user with the added role to view and export the entries with normal data. Please advise.

For your reference, my user role is Donation Form User with slug donation_form. I have added donation_form to the field but it doesn’t work.

The role is created from User Role Editor

Also, can I check if the gfef_decrypt function can be used in entry automation hook? If yes, how can I detect the encrypted field in code to decrypt all the encrypted fields? https://snipboard.io/R5nZGU.jpg

Hello

Do other roles work when listed in the fields view permissions option?

You should not use the gfef_decrypt function directly. There are developer functions available to use and well documented listed at the bottom of the plugin settings page setup and operation instructions.

The recommended function is : gfef_developer_decrypt($entry_id, $field_id, $format) - Returns decrypted Gravity Forms field value or false, and can optionally attempt to have Gravity Forms format the display.

You would use this function within an available hook that lets you augment the individual field data before returning it to be exported. We do not assist with custom programming. But you would basically only need to pass the entry id and field id to the variables and return the resulting decrypted field data.

hi Does it encrypt the information before submission, so the http payload is encrypted already ?

Thanks

Hello

No. Encrypting the http transmissions is simply done by using HTTPS instead of HTTP. HTTPS uses SSL/TLS to encrypt communication between your clients and your server. Our plugin encrypts the data on submission for storage in the database at rest.

I am creating a job application for a client. The Gravity Form saves the encrypted data. I installed GravityPDF, https://gravitypdf.com/, but the PDFs will not display the decrypted data. Do you know how I can achieve that?

Hello

Please see the setup instructions further down under the gravity pdf section. There are instructions and even links a starter custom template for decrypted PDFs.

In short you need to use a custom pdf and then use the decrypted merge tags in it to print decrypted information. You can stick to the provided basic template or create your own with html/php based on existing ones etc.

Which page for setup instructions? I am looking on the PDF page under my form’s settings tab. This is where I enabled password security and set a password for the PDF.

Which template is the one provided? The options I have listed are Blank Slate, Focus Gravity, Rubix, and Zadani in the template drop-down box on the PDF page.

Hello

The setup instructions for our plug-in on the plugin settings page.

Settings-> GF ENCRYPTED FIELDS

Open button for setup instructions at top of page. Scroll down to gravity pdf section.

If you have not yet read the instructions completely please follow through to disclose other important info for setup and usage

Hi,

We have this plugin configured for our form and so far everything is working good. Recently we noticed an issue with notifications.

When an user submit a form, we send 2 notification – one to the admin and another to the user.

While the admin notification seems to work good, user notification fails with the below error message.

WordPress was unable to send the notification email. Cannot send email because the TO address is invalid.

How do we configure this plugin to process all notification emails before encrypting the data?

Thanks

Hello

If you are encrypting the email address field for the users email and then using a merge tag for that field in the send to address, you need to use a decrypted merge tag for that email field. This is covered in initial setup instructions and further detailed in the decrypted merge tag setting instructions. There is also a video tutorial section on using a decrypted merge tag for the “send to” email field of you are going through the video instructions.

Assuming you have the decrypted tags already set up, just use the decrypted tag for the users email instead of the standard tag, because the standard tag will fill in “ENCRYPTED FIELD RESTRICTED” or whatever you have set for the restricted view, which is not a valid email address. The decrypted tag will print the proper email in after decrypting the data.

Hi Can you pls confirm if the plugin ver. 6.1.9 works with latest WP 6.4.1? Need confirmation before I update. The dashboard says WP 6.4.1 support is ‘unknown’

Hello

The last update to WP 6.4 is tested with latest plug-in version (6.1.9). 6.4.1 is a minor release and should present no significant changes. In our dev and live environments for the plug-in it has presented no issues to date.

However, as always, you should test any upgrades to any plugin and / or WP version in a dev environment before committing the updates to a live site.

Hi. We have just launched our client site but we are now unable to deregister the previous testing URL we were using because it is no longer accessible. Would you be able to help?

Thank you.

Hello

Since the previous domains still exist and are reachable the plugin will not let you do it yourself after the fact. For future, you can self unregister through the plugin at any time before changes are made to make this not possible at any time to open the slot up.

Clock our user name and send us an email using the author contact form including your purchase code and the exact url to de register. That site will no longer have available usability for decryption or data output with the plugin.

How do we change the purchase code for a website. I had a client buy some keys for their stuff and we need to change the key on one website to use the new key?

Hello

Expand the top button on settings page that lists “LICENSING AND DEACTIVATION”

Select the checkbox to “ Deactivate License For This Website” and save changes to deactivate the current license. Then enter the new purchase code on the license activation screen that comes up next and relicense the plugin using the new purchase code.

I was hoping to use this plugin to securely accept Driver’s License photos from my customers. The goal would be to immediately delete the file as soon as I have forwarded it to Dropbox. So far I cannot get it to send the file. It deletes the entry before it has a chance to get to the Dropbox. Do you have a way that I can handle this?

Hello The short answer for doing that is that the Dropbox add-on itself should have an option to delete local file after upload. Our plugin immediately deletes the file after submission and notifications etc, but the transfer to Dropbox is asynchronous and continues beyond that.

I have set up this plugin and copied the Settings Page LOCKOUT three times to a text file to ensure it was correct. Now I cannot access the settings. Can you tell me a procedure to reset the plugin?

Hello

The settings page lockout password instructions specify that it only accepts between 8-16 characters when you are setting it up. Anything entered or pasted in longer than this would be truncated to the first 16 characters. Without wiping and reinstalling the plugin, you should first try only entering the first 16 characters of whatever you have stored that you pasted into the settings page lockout password field which is assumed longer than the accepted length.

Please let us know if you need further assistance with the settings page password.

You are a genius, that worked. Thank you much.

Glad to help :)

We have updated the instructions for the settings page lockout password on the settings page to specify that longer entries are truncated.

Hello, we recently changed the domain of a website that had the license key attached to it and we were about to add the plugin to another website and use the license key on there but was told we reached our limit and it listed the domains. Is there anyway to remove one of those domains that it says it’s in use on? It’s the one we switched the domain from so we don’t have access to the backend anymore. Thank you in advance for your help!

Wow that was fast! Thank you very much it is truly appreciated! Probably the best customer service we’ve every had honestly.

Happy to help :)

Hi all – what is the difference between the HIPAA FORMS WordPress plugin by Code Monkeys, and this plugin? My Gravity Form submit is already encrypted in transport, but I need the form data encrypted in storage, at rest.

Hello

Although we are not experts in the HIPPA FORMS plugin, the details of our plug-in and functionality are listed in the description for you to compare products.

Mainly the other is a 3rd party service for encrypted data storage, and ours is a local storage encryption solution with robust user access control and display tools. Our plugin can certainly fill the need to encrypt the data at rest in steps to achieve a compliant system setup.

This is great news – I appreciate the quick response, and detail you provided. Will make the purchase!

When trying to activate the plugin we’re getting this error:

Fatal error: Unparenthesized `a ? b : c ? d : e` is not supported. Use either `(a ? b : c) ? d : e` or `a ? b : (c ? d : e)` in /site/wp-content/plugins/gravity-forms-encrypted-fields/gravity-forms-encrypted-fields.php on line 2356

Can you please help/fix? Thanks!

We got the client to log in and download the latest version, but we’re having trouble activating. As shown in this screenshot I’m trying to activate it on a domain that it’s already validated for, but it’s not activating: https://i.imgur.com/Zhlzt6m.png

How can I deactivate it if it’s not even giving me the option to?

Interesting. Are you using a proxy or other connection method which could alter the connecting url?

You can send us a private message by clicking our user name and using the author contact form. Include your purchase code and explicitly list the exact website you would like to deactivate, and we can deactivate it for you from our end. Any deactivated site will cease to function for decryption and other accessibility of encrypted data.

Hello

It is the www added to your domain. You could change this back in your WP settings very briefly to match exact URLs again to deactivate or activate. Only writing for others benefit to resolve any similar issue. We already deactivated via your email from the contact form. :)

Once we updated the plugin, one of our forms started sending blank CC information – before the update, any user with permissions could see the encrypted info. Please advise.

We are using YOUR plugin to decrypt the information. So certain users can see the information while for the rest its decrypted. Are we even on the same page here?

While the other forms show the decrypted information for the form fields with no issues, this one particular form after the update shows just a blank space. No information period – either decrypted or encrypted.

Hello

To restate.

The credit card field type is not encrypted or able to be encrypted, and our plugin does not directly interact with the CC field type in any way whatsoever.

You have stated that all of the other fields on the form that our plug in does actually interact with are all working correctly, and that you have no reported errors of any kind with our plug-in or otherwise in processing forms. The issue is both in notifications and in viewing entries on the website.

It appears that the you first noticed this issue after an update of our plug-in so the assumption is that it is due to our plug-in. However, most times multiple plugins are updated at a time or some were very recently, and the point of noticing an issue on plugin update is not necessarily the time it started or the plugin it is related to.

There are some easy ways to verify this or at least narrow it down.

1. Is it verified that it was working immediately before update of this plugin alone, and stopped immediately after?

2. Have you tried the general gravity forms solution we recommended of simply replacing the CC field with an identical field? Without implementing any suggested solutions, we cannot resolve any issue.

3. Have you tried updating if available gravity forms, your CC processing add-on, and WP to be sure you are running the latest versions with all fixes etc.?

4. Have you tried just rolling back our plugin version and testing again, or perhaps temporarily disabling our plugin and testing? If it is directly caused by our plugin, even without any error being listed , this should resolve the issue to just revert to the previous version and can be verified after updating again.

I was able to see the encrypted data and now it remains encrypted even on my login with any changes to our settings. I need help seeing the data.

Hello

Hello, did you recently migrate the site or update the plugin? Please check your encryption website key. This is almost always due to using a custom website key and not checking it after an update to be sure it did not revert to the auto key from update where it did not correctly repopulate or after migrating the site. Or if you migrated the site the auto key would change based on the new WP installation. Replace it with the correct key you originally used to encrypt the data.

We strongly advise against ever using a custom website key over the auto key for this reason as warned against doing during setup unless you have to from a site migration. We would advise to manually decrypt any data under it and re encrypt under the auto key. Or you can check the website key for correct repopulation after any of this plugins updates to be sure it is correct and did not revert to the auto key.

by
by
by
by
by
by

Tell us what you think!

We'd like to ask you a few questions to help improve CodeCanyon.

Sure, take me to the survey