WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Until recently I've been using Custom Contact Forms to create some more advanced forms. The sole reason I've chosen this plugin was the ability to create my own layouts and basically just code clean HTML with CCF taking care of the rest.

However, recently I came across this topic and realized how vulnerable the plugin might actually be. Therefore, my question is: is there any other safe Forms plugin that allows me to create my own HTML-based - not UI-based - forms? I'd be grateful for any suggestions.

Edit: Since I don't want to expose the vulnerability (however obvious it is), a temporary solution is to hard-code the recipient e-mail in the plugin code itself. If anybody would like to do that find and edit: /wp-contents/plugins/custom-contact-forms/custom-contact-forms-front.php line 427 and replace

$dest_email_array = $this->getDestinationEmailArray($_POST['destination_email']);


$dest_email_array = $this->getDestinationEmailArray('your@mail.com');

Other solutions I can think of, if you really are stuck with the plugin and have to use different e-mail recipients, is to use Advanced Custom Fields Plugin, to create page-dependent recipients, however, it's not a place to describe the quite lengthy process of doing so.

share|improve this question

closed as off topic by s_ha_dum, brasofilo, toscho Feb 21 '13 at 22:05

Questions on WordPress Development Stack Exchange are expected to relate to WordPress within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

Sorry, plugin/theme recommendations are off topic here. Try the WordPress group on Google+ or wordpress.org forums. – toscho Feb 21 '13 at 22:05

I would check out ContactForm7 it is a nice combination of easy to use and customizable at the same time. You can input html directly into the form if you'd like, and it doesn't suffer from the same vulnerabilities that CCF does.

share|improve this answer
Thanks for your reply. The plugin you mentioned also seems to have a worrisome number of 1-star ratings. You didn't encounter any problems with it? – Maciej Gurban Feb 21 '13 at 20:22
I've used it in the past on many projects without any issues. It is free so you have nothing to lose if you want to try it out. The majority of those one star ratings seem to be from people who couldn't figure out how to use it, entered their email address wrong, or don't have their mail server configured properly. – Josh Mountain Feb 21 '13 at 20:37

Not the answer you're looking for? Browse other questions tagged or ask your own question.