Code

Discussion on Gravity Forms Encrypted Fields

Discussion on Gravity Forms Encrypted Fields

Cart 3,420 sales
Recently Updated

PluginOwl supports this item

Supported

This author's response time can be up to 5 business days.

698 comments found.

Hi, I accidentally purchased the plugin twice – I would like to keep the plugin with 12 month support.

Can you refund the other purchase for me?

Hello

You can request a refund through your envato account. The plug-in functionality will be disabled after refund is issued.

Hello,

As per your license management we are having issues with our website license activation.

We are seeing you don’t have any interface to manage the sites of the licenses.

We build a website at the production environment and after finalizing it we pushed it to live site. Now when we tried to activate the license – http://freshy.cc/zgQqh000 its still showing that dev site is activated where the dev domain is replaced by the live domain. And we can’t go back to the dev site – https://rouserpcinc.freshy.dev to deregister the license.

Can you please remove the license from here https://rouserpcinc.freshy.dev so that we can activate the license on the live site – https://rouserpcinc.org.

Please let us know urgent.

Thanks!

Hello

Click our user name and send an email using the author contract form and include your plugin purchase code there and the EXACT url to deregister.

DO NOT respond to this comment and list the purchase code publicly.

The licensing activation does allow for one dev site AND one live site to be active at the same time. Do you already have more than one site active?

Got it! I removed the screenshot and emailed through author. The code was used 2 website where one of them is the dev production site. and the production site is now live. But we can’t delete that production site license since the production one is basically pushed to live now :)

Hope you understand.

Thanks!

We have deactivated the dev site, and an activation is ready to use. However, note that this license is already active on a production website.

Your license through envato dues NOT allow installation on 2 live sites. It allows for a single live end product production website only. We make concessions for a second activation only for dev purposes of the same live site.

You should purchase another copy to run which would allow a dev site for each. If these are web clients, they should also be privy to their own discreet purchase code/licenses.

Hope this helps.

Hello how can I decrypt a field value with php while using some gravity forms core hook and actions?

Hello

That is good. it should not be selected. I see now looking at your code that it is likely not working because you are not using the correct variable parameters as requested by the function.

our function is as follows:

gfef_developer_decrypt($entry_id, $field_id, $format)

note that as listed in the documentation the first parameter is the entry ID and not the complete entry object. This can be accessed from your entry object like this: $entry[‘id’]

Your function should be as follows:

gfef_developer_decrypt($entry[‘id’], $field->id . ’.3’);

Hope this helps

You rock! That did the trick for me! Sorry I missed that and ruined your time! Btw, and when you have some time, can you also explain why I am getting an empty string for those same fields for which I am using the decrypt merge tags per your instructions on a custom notification I have set up from the gravity forms settings which is activated when form is saved using the save and continue functionality? I cannot make them work. Just an idea of what I should check at. I have already decrypted the tags using the value 5:1.3, 5:1.6 and also found and placed the new generated tags on the notification body content. However, they do not work. I guess if this cannot be fixed, I can run a custom wp_mail() function and use the above solution you gave using the dev function to decrypt again the fields.

The save and continue entry is encrypted as a whole to comply with how gravity forms stores it because it is a single json object. It is not done as usual per field.

You can check the simple encryption for save and continue functionality in our plugin (search save and continue) and use it to decrypt the entry object retrieved first, then if able to access the merge tag functionality at that point via gravity forms normal operations you can access as needed. Only need to decrypt the json object first.

hi there, is there an option to set time/age of entries/fields/signatures when they should be Deleted instead of immediately being deleted? Eg. Delete X field entry data after 2 weeks of submission? And how can the previously submitted data be Deleted instead of only data submitted after option to Delete was enabled in plugin settings (the first question/option, if available, would actually address this too). thank you.

Hello

There is no time delay option for deletion of entries or specific field data. It is only an option to be deleted immediately after the submission is processed.

Hello, I would like to purchase your plugin but I’m curious if it will be able to pass entries to Zapier if they are encrypted? We have our entries going to Zapier right now that are processed and then sent to a CRM.

Hello

You can select to process feeds and add ons before encrypting . This passes normal data to all your plugins needing it belle the data of encrypted at rest after submission

Hello, I want to purchase this plugin but first I would like to test it to see if it does meet all our requirements. Is there a way we can try it first in a dev environment before purchasing? We are interested in the encryption of Gravity Forms confirmation email, if that data could be encrypted.

Thank you.

Hello

As in the plug-in description, Our plugin is for encryption of the data at rest and does not encrypt the notification emails. You can do this simply by sending them over TLS/SSL using an SMTP service to send your Wordpress emails. This is implicit encryption that all emails use over TLS like Gmail etc.

If you want explicit encryption that requires further action from the user to decrypt the email for reading please check out a plugin like the PGP mail

You CAN use or plugin to send encrypted strings in the email, but you would need to build a decryption service on the v v other end for client decryption. You may want to consider just sending out the entry links in the email and enforcing website login to view the entries. Then you can control which specific logins have access to specific field data with our plugins access controls. Giving those users the ability to only view entries allows them to authorize first by logging in to view and can then be further restricted to specific data view ability of encrypted data with our plugin.

Plugins have no trial from envato. You can purchase and request a refund from your envato account if the plugin does not meet your needs. Once the refund is issued the plugin activation will cease to function.

can i use the plug-in for multiple domains?

Hello

No. the licensing from envato allows one single domain install per license/purchase code (our license manager allows 1 additional install on a dev/test domain for that same live site)

I need to know if there’s a way for the “Print Entry” to show the fields when logged in. We have the userrole set up properly so that only specific persons with that role can view the information but when you go to “Print Entry”- the fields are hidden?

Hello

The print entry permissions and view are the same as normal entry viewing. Normally anyone with view permissions sees entry print screen and resulting print as normal. There is no extra step required.

Can you confirm that the same user is able to see the data in the entry view screens?

If they can there must be an error or conflict somewhere. Please make sure you are running the latest plug-in version (6.2.2) and try again. If this does not correct the issue try disabling all other plugins and trying again. If it works then, Activate other plugins one at time checking each time until you find the conflict. If you could let us know any results if there is a plugin conflict found, we can work on any resolution.

Please also check that the users in that role have the ability to print GF entries

Hallo,

I want to offer every user who signs up the opportunity to create their professional profile, including a telephone number, via a form on my website. The telephone number should be encrypted, and users should be able to edit their telephone number using Gravity View. Only the owner of each entry should be able to view and edit their telephone number on the frontend side of Gravity View, and then save it back into the database in encrypted form. Is it possible to implement this functionality with your plugin?

best regards Robert

Hello

Sorry to disrupt other answer , but before you dive too deep into permissions with our plugin to work with GV permissions have you tried just standard encrypting everything and just using the GV view access to control who can see what?

GV lets you create views where users can only see their own data, so you don’t need to further restrict viewing on our plug-in end unless your users have access to admin where they could potentially see other users data. That said , you can do both if desired

Hello

Has this setup issue been resolved?

Sorry for the late reply, I was ill. I have to test a few options and settings with the permissions first and then I’ll get back to you…

Hello I am facing the same issue as other people mentioned. I update everything on the website and this plugin is also updated to latest version 6.2. I am facing a Fatal error: Uncaught TypeError: substr(): Argument #1 ($string) must be of type string, array given in /wp-content/plugins/gravity-forms-encrypted-fields/gfef.php:757

When we have the plugin deactivated the contact forms send fine. Please let me know how to fix this so we can keep using this plugin.

Thank you. Please evaluate ver 6.2.1 which was just released. we have tested on latest version of WP and gravity forms with User registration add-on and are not having any error, but Your confirmation of this would help as subtle environment difference could be a key issue.

Thank you for the update. Everything works well now on my website after testing. Thanks for getting this update out so quickly.

Happy to help. :)

Hi, there seems to be a conflict with this plugin and the Gravity Forms User Registration Add-On though I can’t get more than a generic “There has been a critical error on this website.” Can you help in any way or point me in the right direction on how to solve this?

Thanks!

Thank you. Please evaluate ver 6.2.1 which was just released. we have tested on latest version of WP and gravity forms with User registration add-on and are not having any error, but Your confirmation of this would help as subtle environment difference could be a key issue.

Everything is good!

Happy to help :)

Hi, Could you please send me confirmation or documentation that this plugin will help make my forms HIPPA compliant

Hello

Our plugin can certainly cover a few aspects of HIPAA compliance. Namely encryption of the data at rest and access controls to the data. But it can only cover meeting one or more of multiple parts required to achieving full HIPPA compliance in any environment.

We cannot give you general confirmation that simply using our plug-in would help meet hippa compliance as it could potentially be used incorrectly or set up without actually enforcing the helping factors for your specific scenario.

What we CAN confirm for you is that the encryption and data access controls available in it are generally more than acceptable to meet those portions of compliance if properly configured. There are plenty of companies using it for collection of sensitive data currently, but for confirmation you need to work with HIPPA compliance personnel to discuss your specific case and requirements.

For more information on HIPPA compliance please reference the HIPPA compliance guidelines and compliance white papers.

Hi there,

I was wondering if you could help us debug in issue with the encryption plugin on one of our sites. We have been using GF encrypted fields on two of our sites for awhile. We’ve noticed that the Encryption Password textfield and login button are not showing up for one of the sites and were wondering if you might have an idea why that might be. The password has been set for the site but we can’t find a way to enter it so that we can view the encrypted values.

Thanks, David Boutin

Hi there, thank you for the quick response! Here’s the info it shows: Click Here for System Check

Server Encryption Support: YES OpenSSL Encryption Supported! Mcrypt Encryption NOT Supported! Mcrypt is legacy(old) and requires server install in PHP 7.2+ . This is NOT needed if using Open SSL.

PHP Version: 7.4.11 PHP Version Supported!

Wordpress Version: 6.4.3 Wordpress Version Supported!

Gravity Forms Version: 2.8.6 Gravity Forms Version Supported!

Website Key: YES Auto unique website key generated and will automatically regenerate after plugin updates.

Encryption Password: YES Encryption password active.

Encryption Type: YES OpenSSL ON

Encryption Turned On: YES ENCRYPTION ON

Merge Tag Filter On: YES MERGE TAG FILTER ON

Also, from the encryption testing:

SAMPLE ENCRYPTED DATA STORED IN DATABASE: GFEncrypt: d4f1c422da24f741e4c9777151OGhwQjlJVkJpTDdSazlLOVlvMnBER0t5UlQ3eDRrczRLNkM5SUZ4Uld4OD0=

ENCRYPTION SUCCESSFUL

SAMPLE DECRYPTED DATA: USERS WITH PERMISSION SEE THIS IN ADMIN. YOU MUST LOG IN IF USING ASYNC.

my personal info 123-45-6789

DECRYPTION SUCCESSFUL

Hello

Ok that looks good. I also want to verify that you are using Asynch mode on this site. You can verify this by checking your encryption type in the plugin settings page. Both the Open SSL and the Asynch /Strict Access mode options must be used in order to get Asynch mode login required for decryption.

If this is not the case, do not just turn it on. You will likely want to decrypt any existing data from standard open ssl before re-encrypting it using Asynch mode if that is how you want the data to be accessed. You may need to check your confirmation and notifications set up to be sure they are set up for Asynch mode as well. This should all be done with available encrypting forms turned off momentarily.

Thank you! This helped solve the problem (one site used async mode and the other didnt) :).

Hi, I have setup the plugin and it works well with new submissions. I have 1677 older entries that I need to encrypt. I can see that it gets encrypted if I open and save the entry but I can’t do this 1677 times. Any solution? Thank you.

Hello

Yes, this is covered in the plugin setup and operation instructions under “ENCRYPTING / DECRYPTING PREVIOUSLY SUBMITTED FORM DATA”

Please use the manual encrypt/decrypt tool at the bottom of the plugin settings page. Carefully follow the instructions. You can encrypt in batches of up to 200 at a time in a few seconds each. Just increase the batch offset number by 200 each time. Start this number at the number of NEWER entries you already want to skip over for processing going backwards chronologically. It does not have to be exact, if data is already encrypted it will be skipped. You can specify the exact fields to encrypt or just encrypt all supported field types for the form.

You should have all 1677 old entries encrypted in a couple minutes once you get started.

Hope this helps :)

Thank you! It was indeed clear on the instructions but I had missed that.

Happy to help!

Hi,

Our site is getting hammered by cron jobs. What can i do about this? :)

https://prnt.sc/mp6gnrIJLucx

Best regards!

Hello

It appears you are using a very outdated plug-in version.

Please update your plug-in version and keep updated for new features and fixes according to updating instructions in the plug-in settings page or plugin readme.txt. Current version is 6.2

You can get auto updates and notifications using the ENVATO MARKET plugin. Or select to receive notice of this plug-in’s updates via email in your envato account under your purchase of this plugin.

HI,

I have your gravity forms encryption plugin installed on one of our sites.

I know you can globaly turn on encryption for existing forms, but is it possible to turn on Global encryption for new forms as they are created?

If so can you give me some pointers as to how to implement this

Hello

There is currently not an option for this, but presuming the form are being made manual/normally and not being created programmatically, encryption can be turned on for fields as desired when the form is being created.

We do not assist with custom programming, but you could of course programmatically turn on encryption for new forms as well if you wanted to tie into the gform_after_save_form hook. it fires after forms are created or updated and has a Boolean passed which fires if the form is new or just being updated. You could use this to fire our global encryption switch code based on new forms and pass the form ID through from the hook which also has the complete form object as a passed parameter.

https://docs.gravityforms.com/gform_after_save_form/

As a note, the reasoning why we have not just added this as a feature is that it is generally not advisable to encrypt every supported field type independent of whether or not the field actually stores any type of sensitive data. Encryption can be resource intensive, and as such by encrypting everything indescriminatly, it would add unnecessary load to the DB and processing of your forms. This is generally arbitrary of course assuming your server is aptly resourced, but many casual users do not have server resources and practices anywhere in mind, so as a general practice it is better to encrypt only when called for. Keeping the global encryption to an intentional action at least helps to curtail this otherwise preventable possible issue. As servers get generally faster and more resourced we may roll it out as it would be even less likely to cause any issues on weaker servers where users are creating massive forms etc.

I recently downloaded version 6.2 of the plugin to replace our older v6.1.5. When activating the new version and accessing older form entries, it looks like the decryption is not working. Switching back to 6.1.5 works fine and I can view decrypted entry values. Is there an extra step to take when updating the plugin?

The only reason you would not see your data is if the decryption key/pass have changed.

Are you for some reason using a custom website key instead of the auto generated one? This is the only time you must perform an extra step on plug-in update and the most likely reason the key/pass would change without user change. You need to check that the custom key populated properly after any update of the plugin to see if it repopulated correctly and if not, change it back to what it should be . Generally if the custom key does NOT repopulate it will switch to the auto key. This is documented and it is repeatedly strongly advised against using a custom key when setting up the plugin, ..but there are some legitimate scenarios that could require its use.

Using the auto key does not have this issue and does not require this step. If you are using a custom key without any required reason, you could switch the forms off momentarily and manually decrypt your existing data with the manual decrypt tool and switch to the auto key and then manually re-encrypt. Then update and not worry about this step in the future.

If you happened to migrate/clone your website previous to the update your auto key will be different unless you made an EXACT copy of your sites files. In this scenario your old auto key would be a custom key, and If you still have your old sites files we may be able to help you rectify the files so the auto key remains the same.

I did migrate the website prior to the update, so that’s probably what happened. I should still be able to do the manual decrypt, then switch to auto key, then update, then manually re-encrypt – yes?

Hello

Yes, just be sure the forms are turned off during that time so nothing comes in while you are processing the entries.

Or If you want to send us an email (click our user name and use the author contact form) we could also give you some quick tips on how to try pull the auto key back from the previous site. It’s pretty quick and easy. Faster than the manual decrypt/encrypt, but requires you still have your old site files.

Do you have a historical changelog, to show previous updates too? Not just the most recent version notes? I’d like to know each change since 6.1.7

The .readme file for the plugin contains all version changes.

You can use the plugin file editor in WP admin to read the .readme file

Or download the latest version and check the readme file for all changes up to it from 6.1.7 before install

Response moved to original thread

Hello Team

I would like to inform you that the customer fills out the form from our website and the fields are encrypted by using Gravity Form Encryption, but due to some issues website didn’t send any notification email to us. In this way, we miss the email notification, if that email comes then we can see the actual data filled by the customer because for email body we used {gfef_decrypt_ALL+}

Now, how can we see the encrypted fields data of that customer. Please let me know asap

Thank you!

Hi

Okay, Let me check what can we do in this case.

Thank you!

Hi

I have find out the solution, and the issue with the activation process if we skip the activation process for registration user than it seems perfect. Now, when the user will registration, he will get a notification email on their email that you have been registered on the website, please reset the password and login to your account dashboard.

Is that okay?

Thank you!

Hello

Yes. Our support team previously stated it was possible when immediately activating the user multiple times. However, It still does not make the data secure to bother encrypting the user data copy stored in gravity forms when it is stored unencrypted in the same database in the WP user table. If you are not using a recommended solution through gravity view or encryptWP, Deleting the GF copy is again considered the best alternate option as you look and search for users in the WP user admin interface anyway.

by
by
by
by
by
by

Tell us what you think!

We'd like to ask you a few questions to help improve CodeCanyon.

Sure, take me to the survey