FormNest is a comprehensive form management plugin for WordPress that handles everything from form creation to submission processing and data management. Based on MWFORM plugin functionality, it’s a next-generation form plugin with modern UI/UX and enterprise-level security features.

Key Features

Intuitive Form Builder: Easy drag-and-drop operation
Rich Field Types: Support for 10+ field types
- Text, Email, Phone Number, Number, Date, Time, URL
- Textarea, Select, Radio Buttons, Checkboxes
- File Upload, Agreement Checkbox
Advanced Email Features: Admin notifications, auto-reply, HTML email support
Comprehensive Data Management: Submission list, search & filter, CSV export
Enterprise-Level Security: Rate limiting, honeypot, security logging
Modern UI/UX: Responsive design, accessibility support

Security Features

Rate Limiting: IP-based access restrictions for DDoS protection
Honeypot Function: Bot detection and automatic blocking
Input Validation: Appropriate sanitization by field type
Security Logging: Detailed recording and monitoring of all events
File Upload Security: Type, size, and MIME validation
CSRF Protection: Nonce verification and referer checking

System Requirements

WordPress 6.0 or higher
PHP 8.0 or higher
MySQL 5.7 or higher, or MariaDB 10.3 or higher

External services

This plugin connects to the following third-party services to provide enhanced functionality. Each service is documented below with clear information about what data is sent, when it is sent, and links to the service provider’s terms and policies.

Google reCAPTCHA

This plugin connects to Google reCAPTCHA (https://www.google.com/recaptcha/) to protect form submissions from automated spam and abuse.

It sends the user’s IP address, reCAPTCHA response token, and browser/device information every time a user submits a form (only when a form has reCAPTCHA enabled in its settings). The reCAPTCHA verification request is sent from your server to Google’s API.

This service is provided by Google LLC: Terms of Service (https://policies.google.com/terms), Privacy Policy (https://policies.google.com/privacy)

zipcloud Postal Code API

This plugin connects to the zipcloud Postal Code API (https://zipcloud.ibsnet.co.jp/) to provide automatic address lookup when users enter a Japanese postal code in the postal code field. This provides a better user experience by auto-filling prefecture, city, and street address fields.

It sends the Japanese postal code (7 digits, numbers only) to the API every time a user enters a postal code in a postal code field on the frontend (only when the postal code field has auto-address lookup enabled). No personal information, IP address, or user data is transmitted. Data is sent directly from the user’s browser to the API via JavaScript.

This service is provided by AIBISU Corporation: Terms of Service (https://zipcloud.ibsnet.co.jp/rule/site)

HeartRails Geo API

This plugin connects to the HeartRails Geo API (https://geoapi.heartrails.com/) to look up cities and municipalities when a user selects a prefecture. This enables cascading dropdown functionality for Japanese address fields (Prefecture City selection).

It sends the selected prefecture name (e.g., “東京都”, “大阪府”) to the API every time a user selects a prefecture in a prefecture field on the frontend (only when the prefecture field has city auto-complete enabled). The API is also called once when loading the prefecture list to get all 47 prefectures. No personal information, IP address, or user data is transmitted. Data is sent directly from the user’s browser to the API via JavaScript.

This service is provided by HeartRails Inc.: Terms of Service (https://www.heartrails.com/ja/company/terms), Privacy Policy (https://www.heartrails.com/ja/company/privacy_policy)

RESAS API (Regional Economy Society Analyzing System)

This plugin optionally connects to the RESAS API (https://opendata.resas-portal.go.jp/) to fetch the official list of 47 Japanese prefectures for use in prefecture selection fields. This is an alternative to the built-in static prefecture list.

IMPORTANT: This service is OPTIONAL and DISABLED by default. It sends the API key (configured by site administrator) and User-Agent header (FormNest plugin name and version only) only when ALL of the following conditions are met: (1) Site administrator has obtained and configured a RESAS API key in FormNest Settings, (2) Site administrator has explicitly checked “I agree to communicate with RESAS API” opt-in checkbox, (3) A prefecture list is requested via AJAX. If any condition is not met, the plugin uses its built-in static prefecture list and NO external request is made. No user personal information, form data, IP addresses, or site URLs are transmitted.

This service is provided by Ministry of Economy, Trade and Industry (METI), Government of Japan: Terms of Service (https://opendata.resas-portal.go.jp/terms.html)