GMC Lead Capture — Documentation (WordPress)
GMC Lead Capture is a lightweight lead-form plugin for WordPress, built for the flows that bring in business: contact, quote and enquiry forms. You define the fields, recipients, confirmation message and privacy consent, publish the form on any page, and every submission is stored inside WordPress and emailed to your recipients — so no enquiry is ever lost, even if an email bounces. It is aimed at service businesses, agencies, accommodation and tour sites, and any WordPress site that turns enquiries into revenue and does not want a heavy form builder.
Requirements: WordPress 6.0 or newer, PHP 8.1 or newer.
Installation
- Download the plugin
.zipfrom your purchase email or your account. Keep it zipped. - In your WordPress dashboard go to Plugins → Add New Plugin → Upload Plugin.
- Choose the
.zipfile, click Install Now, then Activate. - After activation, the plugin's settings screen appears in the admin menu.
Configuration
All configuration is done from the plugin's own admin menu and its Settings screen. For a basic working form:
- Create a form. Start from scratch or pick one of the starter templates — Contact, Newsletter, Quote, Callback, Support or Event — to speed up setup.
- Define the fields. Add the fields you need, choose their field types and mark which are required. Conditional fields and multi-step pages are available for longer forms.
- Set the recipients. Enter the email address(es) that should be notified on each submission.
- Add the privacy consent checkbox and write the confirmation message shown after a successful submission. You can also set a redirect / thank-you URL instead.
- Switch on anti-spam. Enable the form's anti-spam protections; optional reCAPTCHA v3 verification and server-side email validation are available.
- Optional extras, all managed from Settings: a per-form autoresponder, HTML email, a webhook, submission retention / auto-purge, and Brevo (Sendinblue) integration to add submitters to a Brevo contact list.
Using the plugin
Publishing a form on a page
Once the form is built, publish it on any page of your site. By default the form renders inline in the page content. A popup / modal display mode is also available: a trigger button opens the form in an overlay instead of showing it inline — useful for "Request a quote" or "Contact us" buttons that should not take up page space.
Managing submissions
Every submission is saved in the WordPress admin as well as emailed to the recipients you set, so you always have a stored record plus a notification. From the admin you can review all leads in one place and download stored submissions as CSV; the CSV output is hardened against spreadsheet formula injection. If you configured retention / auto-purge, old submissions are removed automatically after the period you set.
File uploads
Add a file upload field when submitters need to attach documents or images. Uploads are validated server-side with an extension allowlist and a 5 MB size cap, stored under an unguessable random filename, and the file link is saved together with the submission.
Languages
The plugin ships with English, Italian and Spanish out of the box and respects your site's multilingual setup.
Updates & licence
GMC Lead Capture is a paid product (EUR 19, one-time). After purchase you receive a Download Key with your licence email. Enter it on the plugin's settings screen — the field shown after activation under the plugin's own admin menu. The key unlocks licensed one-click updates from the GMC / FuerteventuraTV update server.
- Automatic updates: the plugin checks the update server on its own (roughly every 12 hours) and shows new versions under Plugins / Dashboard → Updates, like any other plugin, as long as your licence is active. You can also re-download the latest build from your account at any time.
- Licence: the software is released under the GNU GPL. Your purchase covers the official build, updates and support for one site. For multiple sites or client projects, contact us for a volume or agency arrangement.
- Scope: the WordPress licence covers the
wp-gmc-lead-captureplugin only; the Joomla edition is sold as a separate product.
Support
For help, reply to your purchase email or message us on WhatsApp at +34 633 168 995 (the same line appears in your licence email). Please include:
- the product name and version,
- your WordPress and PHP version,
- a public URL or a screenshot of the issue (mask any keys).
We answer in English, Italian and Spanish. If the product does not work as described and we cannot fix it for you, you can request a refund within 14 days of purchase.
Everything included
71 real features, grouped by area — no filler, just the full depth of the tool.
Form builder
- Visual form builder — define exactly the fields you need per form, no code, then embed it anywhere; forms are stored server-side, not hard-coded.
- Unlimited forms — build as many distinct forms as you want (contact, quote, callback, newsletter, support, event…), each with its own fields, recipients and settings.
- 11 field types — text, email, tel, number, date, textarea, select, radio, checkbox (consent), hidden and file upload cover almost any enquiry.
- Required-field flags — mark any field mandatory; enforced both in the browser and again server-side.
- Per-field option lists — supply the choices for select/radio fields, or the fixed value for hidden fields, from a simple comma list.
- Custom submit button label — set the call-to-action text per form ("Send", "Get a quote"…).
- Custom email subject per form — every form's notifications arrive with a subject you control.
- Per-form recipients — route each form's leads to one or several email addresses, independent of the global default.
- Human-friendly field labels — set the visible label separately from the internal field name.
Smart form logic
- Conditional fields — show or hide a field based on another field's answer (equals / not-equals), so forms adapt to the visitor and stay short.
- Multi-step forms — split long forms across numbered steps with Next navigation, validated step by step, for higher completion rates.
- Hidden-step safety — required fields on a hidden conditional step never silently block submission; the form jumps the visitor to the real problem and reports it.
- Inline or popup/modal display — render the form in the page, or as a trigger button that opens it in an overlay (close on ✕, backdrop click, or Escape).
- Custom modal trigger text — set the wording of the button that opens the popup.
Embedding & shortcodes
- Shortcode embedding — drop a stored form anywhere with
{gmcform id="slug"}/{gmcleadform …}(Joomla) or[gmcform id="slug"]/[gmcleadform …](WordPress). - Works beyond the article body — Joomla renders the shortcode in the final HTML too, so the same form works in footers, YOOtheme modules and custom HTML, not just inside articles.
- Ad-hoc quick forms — without building anything, a
fields="name,email,message"shortcode renders an instant contact form (back-compatible fallback). - Two shortcode aliases — both
gmcformandgmcleadformare accepted on both platforms.
Starter templates
- Built-in template library — start a new form from one of six ready-made starters: Contact, Newsletter, Quote, Callback, Support and Event, configured in one click.
Lead capture & management
- Every submission stored — each lead is saved in the site database as well as emailed, so no enquiry is ever lost even if the email bounces or gets buried.
- Email notification to your team — every submission is sent to the recipients you choose, with optional plain-text or HTML formatting.
- HTML email option — send richly formatted notification emails per form instead of plain text.
- One-click CSV export — download the full submission history as CSV from the admin for import into a spreadsheet or CRM.
- Spreadsheet-injection–safe CSV — exported CSV is hardened against formula-injection attacks, so opening it in Excel/Sheets is safe.
- Admin submissions list — browse and manage collected leads inside the CMS admin (Joomla: Components → GMC Lead Forms; WordPress: GMC Lead Submissions).
- Toggle storage — turn database storage on or off globally if you only want email notifications.
Follow-up automation
- Per-form autoresponder — automatically send a confirmation/thank-you email back to the person who submitted, using their email field.
- Custom autoresponder subject & message — set the wording of the automatic reply per form.
- Redirect / thank-you URL — send visitors to a specific thank-you page after a successful submission.
- Configurable success & error messages — control exactly what the visitor sees on success, on error, and on CAPTCHA failure.
- Sender override — set the From name and email applied to all plugin emails; left blank, the site's global sender is used and other plugins' mail is untouched.
File uploads
- File-upload field — let submitters attach a file (CV, brief, photo) directly on the form.
- Extension allowlist — restrict accepted file types per field, intersected with a built-in allowlist of 14 safe extensions.
- 5 MB size cap — oversized files are rejected server-side before storage.
- Real MIME + archive-shape validation — files are checked by real content type and Office/OpenDocument archive shape, rejecting extension-spoofed, executable and path-traversal payloads.
- Unguessable stored filenames — uploads are saved under a random filename in a hardened directory (PHP execution denied, directory listing off); the file link is saved with the submission.
- No orphan files — uploads are validated before the reject gate and only moved once the submission is known-good; retention purge deletes the referenced files first.
Integrations
- Webhook (POST lead as JSON) — push every submission to an external URL as JSON to wire the form into Zapier/Make/any endpoint or your own CRM.
- Brevo (Sendinblue) integration — optionally add the submitter's email to a chosen Brevo contact list on submit, per form (own API key + list ID).
- CMS-native CAPTCHA (Joomla) — reuse your site's configured CAPTCHA plugin, or force reCAPTCHA v3, without extra keys.
Anti-spam & security
- License-gated rendering & submission — forms are gated behind the licensing entitlement; unlicensed installs show a notice instead of an exploitable form.
- CSRF protection — every submission is validated with a Joomla token / WordPress nonce.
- Honeypot trap — a hidden field silently absorbs bots; a filled honeypot is treated as a no-op with no email sent.
- Per-IP rate limiting — a 60-second window per IP throttles submission floods.
- Optional CAPTCHA — require CAPTCHA per site; fails closed, so a misconfiguration blocks the submission rather than letting spam through.
- reCAPTCHA v3 (WordPress) — score-based verification (≥ 0.3) with action check, active only when both site and secret keys are set.
- reCAPTCHA v3 fallback (Joomla) — if Joomla's reCAPTCHA v3 plugin doesn't expose standard markup, a built-in fallback injects the script, fetches a token and validates it server-side.
- Server-side validation against the definition — required fields, email/number format and select/radio whitelists are re-checked on the server, so a tampered POST can never store an out-of-list or malformed value.
- Input sanitisation & output escaping — fields are stripped, email-validated and length-capped on input; all output is HTML-escaped.
- Host-allowlisted updates (WordPress) — the one-click update download URL is restricted to the official gateway host over HTTPS only.
Privacy & GDPR
- Privacy-consent checkbox — add a GDPR consent checkbox as a native field type on any form.
- Double opt-in / email confirmation — optionally hold a lead as "pending" and only fire admin notification, webhook and Brevo after the submitter clicks a confirmation link; the visitor sees clear "check your email", "confirmed" and "invalid link" messages.
- Submission retention / auto-purge — set a retention period per form; older submissions (and their uploaded files) are automatically deleted.
- Leads preserved on uninstall — uninstalling removes settings, form definitions, license and cached metadata but never destroys collected leads.
- No third-party data leakage — the only outbound calls are the ones you configure (webhook, Brevo) plus the licensing/update check; no external form service ever sees your leads.
Internationalisation
- Fully translatable — every admin and frontend/email string is translatable.
- Ships English, Italian and Spanish (WordPress) — three languages included out of the box, respecting the site's multilingual setup.
- Multilingual-ready (Joomla) — English strings shipped; standard Joomla language override/translation supported.
Admin & operations
- Native admin UI — manage forms and submissions from a normal CMS admin screen (Joomla component with subform field editor; WordPress settings pages with a field repeater).
- Slug-based form IDs — reference each form by a clean slug in its shortcode.
- Global defaults — site-wide recipient, sender name/email, success/error text and CAPTCHA settings that individual forms can override.
- Lightweight footprint — a lean, focused tool, deliberately not a heavyweight form-builder suite.
Trust & licensing
- GPLv2-or-later licensed — the software is open-source GPL; your purchase buys the official build, licensed one-click updates and support for one site.
- Self-hosted / owned — clean-room code, no external form SaaS; your leads live only in your own database.
- Licensed one-click updates — automatic updates delivered from the GMC / FuerteventuraTV gateway (Joomla ~every 24h; WordPress ~every 12h) while the licence is active; re-downloadable from your account anytime.
- Download Key activation — a Download Key emailed after purchase unlocks updates; no external account or runtime dependency beyond the entitlement check.
- Fail-open licensing — licensed sites keep working through gateway outages (last-known-good), while genuinely unlicensed installs are blocked.
- Sold per platform — the Joomla licence covers the lead-capture package; the WordPress edition is a separate product (both one-time, EUR 19).
- Requirements — Joomla 5.x/6.x or WordPress 6.0+, PHP 8.1 or newer.
Joomla & WordPress
- Joomla — the shortcode also renders in the final HTML body (works in YOOtheme/footer/custom modules); CAPTCHA reuses the site's configured plugin with a reCAPTCHA v3 fallback; managed under Components → GMC Lead Forms; ships as a single package (component + system plugin) — always install the
pkg_…zip, not the inner zips. - WordPress — brings its own reCAPTCHA v3 (site + secret key, score/action checked) rather than a site CAPTCHA plugin; managed under Settings → GMC Lead Forms / GMC Lead Submissions; ships English/Italian/Spanish translations. Feature set (fields, conditional/multi-step, file upload, modal, templates, autoresponder, webhook, Brevo, double opt-in, retention) is kept at parity with the Joomla edition.
