Hello Correct. You can already store files encrypted with access control by using the Google drive or Dropbox modules. Assuming you do not need to encrypt any of the data you are collecting, Refunds are requested through your envato account. The plug-in will be deactivated and no longer fully function once the refund is issued.

Hello

You are running a very outdated plugin version. The latest version is 6.2.2 Please update your plugin Our plug-in supports the latest version of WP and php 8.1 .

<< it appears it is already deactivated. Were you able to locate the option and deactivate it yourself already?>>

No.  What I did was:

1. Installed the plug-in on a site with the original URL. 2. Activated it 3. Did not see any of the option buttons at the top (Setup / Video / Licensing, etc). 4. Deactivated the plugin 5. Deleted it.

That is the point where I sent you an e-mail.

About 20 minutes later, went to the new site, tried activation, and it worked. Thought that was a result of you de-registering based on my e-mail (thought wow that was fast<g>). Oddly enough, I could now see all the buttons missing in step 3 above.

Now I’ve got to work on my other problem

We started on a project five years ago and I came up with a routine to decrypt the data in an outside system. Project was side-lined and has now been resumed, and my decrypt routine no longer works. Don’t have any clue as to why. We were on an older version of the plug-in at the time, but it was after version 3.0 as I was doing an AES256 CBC decrypt. Only odd thing I remember was that there was a doubling up of a Base64 Encode being done from what seemed to be a bug. I haven’t really dug into it yet, but just on a outside chance, anything you can think of that might have changed in the past five years fundamentally? I am not using the async feature, so everything should be the same.

I intend to look at the new plugin code and add some logging so I can see what’s going on, but I thought I’d ask.

Thanks.

Hello

The decryption should be the same logic as before if it’s the same encryption. If your using the auto key and on a new site the auto key will be different though, so the only foreseeable change is that you would have to update the decryption code to reflect the new key if it has changed.

That’s what I thought, but something has changed. I’ll report back what I find.

Hello

Yes. The plug-in is supported, maintained, and tested on all new WP versions as they become available.

Hope this helps

That does help. I wanted to be sure that as WordPress updates I won’t run into a situation where the plugin stops working and no fix will be released.

Thank you!

Ok. Then we would look at the second question.

Did the auto encryption key change due to the site migration? Check your encryption pass in the settings page and change it to the one the data was encrypted under that you copied and secure stored on plugin setup.

This auto key pass change would happen if you copied over and overwrote your core WP files on duplication or migrated to a new WP installation and it’s not actually the same original WP install the plugin was setup on.

If this resolves your issue and you are using a manual key, You can and should look to manually decrypt your data under the manual key and then re-encrypt it with the new auto key. Manual keys exist to help this changeover between sites but are not recommended to be used continually as each plugin update can be a pain to remember to enter the manual key again and eventually will be forgotten and cause issues with the data going forward under the auto key and older data under the manual key. ..it is all resolvable by this same manual decrypt and re-encrypt process but it is best to do it start and not worry because you are using the auto key again for all data

I bought a new license. Should I put my new license key?

You may use any available license you have for the plugin, but this will have no affect on your previous concern.

Yes

Thank you for your reply. I think that a refund is not possible since I have already downloaded the plug-in?

You can request a refund through your envato account. The plug-in will become inactive after the license is refunded

Thank you very much

Hello

Our plug-in handles the Encryption of data at rest. AES-256 in various modes. this should meet or exceed any encryption requirements for any application.

In-transit protocols are not handled by our plug-in as they are web server and/or smtp related and handled and of course we recommend using https for web, TLS (for server connections) and authentication for API and other requests in your data connections.

Encryption keys are either split and scrambled (meaning they are not even directly useable) and then secured across your separate server hardware and are only accessible according to your web servers security and security protocols in place (this equals the same security as your actual site as a whole. Whether keys and data are processed remote or on dedicated hardware doesn’t matter if people can simply enter a few lines of code to send the the data when it’s done or just send it to them on entry before it’s encrypted etc., so this is true of any web server based application), or stored wherever you want if you are using asynchronous mode. There is NO local storage of readable/useable keys in asynch mode and the encrypted private key’s non hard stored additional authentication key must be entered by a logged in authenticated user for every data access session.

As mentioned above, Our plug-in includes an asynchronous Encryption mode which means you have to authenticate and log in, and then authenticate again with a non stored key to be able to access the encrypted data. – but since we only handle encryption at rest , when you transmit, you can use the authenticated gfapi over https, or you can use secure transfer protocols to your destination (which are encrypted implicitly such as https) , AND of course you can additionally retain the explicit encryption of the data from our plug-in to decrypt (using your own simple matching decryption functionality ) on the other end, . You can also opt for things like PGP or your email services/servers explicit encryption options to password protect the encrypted mail contents, or use explicit pdf encryption or any other option based on your format of data being sent or how it is being packaged.

Most users just set up and use it transparently to access the data casually, but you can of course set up much more complex security if you would like according to whatever policy you need to meet, it just goes beyond the reach of our plugin to configure your servers web security and physical access protocols, and manage the myriad of possible data transmission options.

You should encrypt after the submission (feeds and add ons) are processed if the field is populated during feed and add on processing.

They are direct gravity forms ads ons . Viewable and installable from the add-ons available in you gravity forms installation.

gdrive doesnt seem to be included anymore with certified only displaying: https://www.gravityforms.com/add-ons/gdrive-uploader/ dropbox should be listed in the add ons but here is the dev page https://www.gravityforms.com/add-ons/dropbox/

You should encrypt fields that have sensitive (personal/private) data that needs to be protected. Generally speaking, most answers to an essay are not likely to be included in this category unless they contain personal or private data within them. That said I assume the answers are open and context could allow anyone to write what they wish, so I would leave that in your hands to decide what requires encryption vs what does not etc. Pending your WP install administrative needs you can alternatively just hide their view-ability in admin and give access permissions as desired to prevent others from viewing by using the hide field value option instead of actual encryption.

Hello You are not doing anything wrong. File uploads are not a supported field type for encryption. This is because add-ons like Dropbox and google drive already exist to securely transfer your uploaded files to which are both encrypted and secure authentication access file storage solutions. The add ons can also delete your local server copy of uploaded files.

When is your output grade actually populated? Is this something someone enters manually by editing the entry after submission? You can just set the field to encrypt normally if this is the case. Any edits to encrypted fields are encrypted on updating of the entry.

Hello

It can only decrypt data encrypted by this plugin under the same encryption type and keys. Without customizing it to do so, It cannot decrypt data encrypted by other plugins or code in general.

Hello

The plug-in to date has included lifetime updates available through the envato account which purchased it. If you can get the purchase of it from them you could update per your agreement with them, but otherwise you could purchase a new license and download updates as needed with your new license.

Hello

Turn on the “encrypt after submission is processed” option for the specific fields that need to be processed by feeds and add ons such as hub spot prior to being encrypted.

Thanks, great tip.

Hello

It does not encrypt PDF files because there is no need for that. Gravity pdf already has built in password protected encryption options for the created files.

Hope this helps

That’s perfect. Thanks for the quick response!

Hello

No trouble!

You may request a refund at any time through your Envato account under your purchases. Refunds are not issued by author support contact. Once a refund has been issued the plug-in will become deactivated and will no longer function to view your encrypted data , so be sure to decrypt any data you want to have viewable past deactivation.

Hello

There is a section on using with gravity PDF detailed in the plug-in instructions including a basic decrypted pdf template

Yes, I have already read that and after that I contact to your about it. It was not working as we was required.

Hello

What are you looking to set up? Are you looking to show the fields decrypted in the .pdf? You can use the provided decrypted pdf template or modify it to your liking to show the data decrypted in the .pdf. Modifying the templates is in the realm of the gravity pdf plugin so you would refer to that plugins guide on that. In our instructions on gravity pdf there is a direct link to gravity pdf’s template creation/modification instructions for customization of our template or creating your own.

It is unclear what you are asking for direction on doing in regard to the use of query strings, but both our plugins decrypted and encrypted merge tags are available for use in page redirects which make use of query strings, so you can pass forward encrypted or decrypted information to other gravity forms. Our merge tags are covered in our setup instructions, and query string composition is covered in the core Gravity Forms documentation

You wrote”It was not working as we was required.” Can you can describe exactly how you are looking to have things work in order that we can assist?

Hello

If you already have this email address from the first form you can use an encrypted merge tag to pass the data as an encrypted string in the URL query string.

You can set the field you are passing data to in the second form to encrypted as well and it should not double encrypt the data as it checks if it’s already encrypted.

Then use a decrypted merge tag for the email address in the “send to” email field for the notification.

You will need to use the decrypted merge tags anywhere you need encrypted data to be readable by merge tag.

Setting up the encrypted and decrypted merge tags is covered extensively along with images and video tutorial in the plugin instructions.

Hope this helps

Thanks for your help.

Hello

You can decide which specific fields are encrypted per individual form, so you can always simply not use encryption on any fields that you need to be passing/processing any certain custom data on,

or pending your flow you may not need to consider it. The plugins you mention also include hooks you could use to add small snippets of code to run our developer decryption function on for any data you need to decrypt before processing by the system when a user with access permissions isn’t performing the actions (which would ago decrypt the data being pulled/processed)

With so many possible scenarios with those plugins it’s hard to say whether encryption would ever be an issue, but we find that most users either use some custom code to decrypt when needed or use other non encrypted fields to pass custom data

Hello It is currently a lifetime (one time) fee. You can get all updates through your envato account or use the free Envato Market plugin for auto updates

Hello

All encryption options are per individual field in each form. Check the full plugin description for a list of supported field types and encryption options