bgermann

With that you are actually exploiting CVE-2024-22149. This is documented to work on text-only fields but this should have never been supported and with the next version, documentation is going to be fixed.

Theplugin should be available again.

Yes, CVE-2024-22149 is the reason for cforms2 being suspended. When I find the time to fix it, I am going to reupload it.

You can read in 14.12’s changelog:

“remove WordPress comment support”

So, yes, this was removed.

Does this article help? https://dangerousprototypes.com/blog/2013/11/16/killing-cformsii-contact-form-spam-with-regex/

That is already possible.

Yes. There is a JSON debug output that represents all of cformsII’s settings and forms.

Do you really receive YY/mm/DD or is it YYYY-mm-DD, which is the HTML date input’s defined format?

Then you will not be able to activate a “multi step” form.

With cformsII 15.0.4, you can disable the session extension in PHP config entirely.

“Enable Database Tracking” at “Global Settings” needs to be checked. For each form, “Exclude this form from database tracking” and “Enable alternative form action!” must not be checked.

There is a problem with current WordPress versions with the old tracking database. WordPress migrated to a newer jQuery version and the flexgrid plugin that presents the database to you depends on an old jQuery version. There might be plugins available that can fix that. The last WordPress version that will definitely provide the right jQuery version is 5.4.

Okay, I have included a fix for that in 14.12.4 as well, please download again.

You can activate PHP error log as described on https://www.ads-software.com/support/article/debugging-in-wordpress/ to see the error. If you can get me that info I can see if I can do something about it. But I cannot remember anything in the last two years that might be the reason for it.

Users are supposed to migrate to CFDB with version 14.14. You can check out if that plugin can notify you about incoming datasets so you could use it in addition to or as a replacement for the cforms mails.

I have prepared an out of order release for you:
https://github.com/bgermann/cforms2/archive/refs/tags/14.12.4.zip

Please be aware that you should really switch to a current cformsII version asap because there are several known security issues in your version.

Please note that the change is not a slash but a backslash \ in front of – (hyphen). All eight preg_match calls in lib_email.php have to be fixed. Please only replace their first argument so that you do not copy any variable name or parenthesis changes, which are probably responsible for the blank page (critical error).