GMC Lead Capture
Product detail · Joomla 5/6 and WordPress 6+
GMC Lead Capture
A lightweight CMS-native lead form for contact, quote and enquiry flows.
Visitors get a clear next step and you receive structured enquiries without adding a heavy form suite.
Who it is for
Small service sites that need a dependable enquiry form without buying a full marketing automation stack.
Choose the calm option: install it once, keep the feed or form under your control, and stop wondering which external widget will change next.
What is inside
- Simple shortcode form
- Configurable recipient, subject and messages
- Joomla token protection where available
- Works as Joomla system plugin and WordPress plugin
Requirements
- Joomla 5/6 or WordPress 6+
- PHP 8.1+
- Working CMS mail/SMTP configuration
- Privacy policy covering submitted personal data
Shortcodes
{gmcleadform id="contact" fields="name,email,phone,message" subject="Information request"}
[gmcleadform id="contact" fields="name,email,phone,message" subject="Information request"]Everything included
71 real features, grouped by area — no filler, just the full depth of the tool.
Form builder
- Visual form builder — define exactly the fields you need per form, no code, then embed it anywhere; forms are stored server-side, not hard-coded.
- Unlimited forms — build as many distinct forms as you want (contact, quote, callback, newsletter, support, event…), each with its own fields, recipients and settings.
- 11 field types — text, email, tel, number, date, textarea, select, radio, checkbox (consent), hidden and file upload cover almost any enquiry.
- Required-field flags — mark any field mandatory; enforced both in the browser and again server-side.
- Per-field option lists — supply the choices for select/radio fields, or the fixed value for hidden fields, from a simple comma list.
- Custom submit button label — set the call-to-action text per form ("Send", "Get a quote"…).
- Custom email subject per form — every form's notifications arrive with a subject you control.
- Per-form recipients — route each form's leads to one or several email addresses, independent of the global default.
- Human-friendly field labels — set the visible label separately from the internal field name.
Smart form logic
- Conditional fields — show or hide a field based on another field's answer (equals / not-equals), so forms adapt to the visitor and stay short.
- Multi-step forms — split long forms across numbered steps with Next navigation, validated step by step, for higher completion rates.
- Hidden-step safety — required fields on a hidden conditional step never silently block submission; the form jumps the visitor to the real problem and reports it.
- Inline or popup/modal display — render the form in the page, or as a trigger button that opens it in an overlay (close on ✕, backdrop click, or Escape).
- Custom modal trigger text — set the wording of the button that opens the popup.
Embedding & shortcodes
- Shortcode embedding — drop a stored form anywhere with
{gmcform id="slug"}/{gmcleadform …}(Joomla) or[gmcform id="slug"]/[gmcleadform …](WordPress). - Works beyond the article body — Joomla renders the shortcode in the final HTML too, so the same form works in footers, YOOtheme modules and custom HTML, not just inside articles.
- Ad-hoc quick forms — without building anything, a
fields="name,email,message"shortcode renders an instant contact form (back-compatible fallback). - Two shortcode aliases — both
gmcformandgmcleadformare accepted on both platforms.
Starter templates
- Built-in template library — start a new form from one of six ready-made starters: Contact, Newsletter, Quote, Callback, Support and Event, configured in one click.
Lead capture & management
- Every submission stored — each lead is saved in the site database as well as emailed, so no enquiry is ever lost even if the email bounces or gets buried.
- Email notification to your team — every submission is sent to the recipients you choose, with optional plain-text or HTML formatting.
- HTML email option — send richly formatted notification emails per form instead of plain text.
- One-click CSV export — download the full submission history as CSV from the admin for import into a spreadsheet or CRM.
- Spreadsheet-injection–safe CSV — exported CSV is hardened against formula-injection attacks, so opening it in Excel/Sheets is safe.
- Admin submissions list — browse and manage collected leads inside the CMS admin (Joomla: Components → GMC Lead Forms; WordPress: GMC Lead Submissions).
- Toggle storage — turn database storage on or off globally if you only want email notifications.
Follow-up automation
- Per-form autoresponder — automatically send a confirmation/thank-you email back to the person who submitted, using their email field.
- Custom autoresponder subject & message — set the wording of the automatic reply per form.
- Redirect / thank-you URL — send visitors to a specific thank-you page after a successful submission.
- Configurable success & error messages — control exactly what the visitor sees on success, on error, and on CAPTCHA failure.
- Sender override — set the From name and email applied to all plugin emails; left blank, the site's global sender is used and other plugins' mail is untouched.
File uploads
- File-upload field — let submitters attach a file (CV, brief, photo) directly on the form.
- Extension allowlist — restrict accepted file types per field, intersected with a built-in allowlist of 14 safe extensions.
- 5 MB size cap — oversized files are rejected server-side before storage.
- Real MIME + archive-shape validation — files are checked by real content type and Office/OpenDocument archive shape, rejecting extension-spoofed, executable and path-traversal payloads.
- Unguessable stored filenames — uploads are saved under a random filename in a hardened directory (PHP execution denied, directory listing off); the file link is saved with the submission.
- No orphan files — uploads are validated before the reject gate and only moved once the submission is known-good; retention purge deletes the referenced files first.
Integrations
- Webhook (POST lead as JSON) — push every submission to an external URL as JSON to wire the form into Zapier/Make/any endpoint or your own CRM.
- Brevo (Sendinblue) integration — optionally add the submitter's email to a chosen Brevo contact list on submit, per form (own API key + list ID).
- CMS-native CAPTCHA (Joomla) — reuse your site's configured CAPTCHA plugin, or force reCAPTCHA v3, without extra keys.
Anti-spam & security
- License-gated rendering & submission — forms are gated behind the licensing entitlement; unlicensed installs show a notice instead of an exploitable form.
- CSRF protection — every submission is validated with a Joomla token / WordPress nonce.
- Honeypot trap — a hidden field silently absorbs bots; a filled honeypot is treated as a no-op with no email sent.
- Per-IP rate limiting — a 60-second window per IP throttles submission floods.
- Optional CAPTCHA — require CAPTCHA per site; fails closed, so a misconfiguration blocks the submission rather than letting spam through.
- reCAPTCHA v3 (WordPress) — score-based verification (≥ 0.3) with action check, active only when both site and secret keys are set.
- reCAPTCHA v3 fallback (Joomla) — if Joomla's reCAPTCHA v3 plugin doesn't expose standard markup, a built-in fallback injects the script, fetches a token and validates it server-side.
- Server-side validation against the definition — required fields, email/number format and select/radio whitelists are re-checked on the server, so a tampered POST can never store an out-of-list or malformed value.
- Input sanitisation & output escaping — fields are stripped, email-validated and length-capped on input; all output is HTML-escaped.
- Host-allowlisted updates (WordPress) — the one-click update download URL is restricted to the official gateway host over HTTPS only.
Privacy & GDPR
- Privacy-consent checkbox — add a GDPR consent checkbox as a native field type on any form.
- Double opt-in / email confirmation — optionally hold a lead as "pending" and only fire admin notification, webhook and Brevo after the submitter clicks a confirmation link; the visitor sees clear "check your email", "confirmed" and "invalid link" messages.
- Submission retention / auto-purge — set a retention period per form; older submissions (and their uploaded files) are automatically deleted.
- Leads preserved on uninstall — uninstalling removes settings, form definitions, license and cached metadata but never destroys collected leads.
- No third-party data leakage — the only outbound calls are the ones you configure (webhook, Brevo) plus the licensing/update check; no external form service ever sees your leads.
Internationalisation
- Fully translatable — every admin and frontend/email string is translatable.
- Ships English, Italian and Spanish (WordPress) — three languages included out of the box, respecting the site's multilingual setup.
- Multilingual-ready (Joomla) — English strings shipped; standard Joomla language override/translation supported.
Admin & operations
- Native admin UI — manage forms and submissions from a normal CMS admin screen (Joomla component with subform field editor; WordPress settings pages with a field repeater).
- Slug-based form IDs — reference each form by a clean slug in its shortcode.
- Global defaults — site-wide recipient, sender name/email, success/error text and CAPTCHA settings that individual forms can override.
- Lightweight footprint — a lean, focused tool, deliberately not a heavyweight form-builder suite.
Trust & licensing
- GPLv2-or-later licensed — the software is open-source GPL; your purchase buys the official build, licensed one-click updates and support for one site.
- Self-hosted / owned — clean-room code, no external form SaaS; your leads live only in your own database.
- Licensed one-click updates — automatic updates delivered from the GMC / FuerteventuraTV gateway (Joomla ~every 24h; WordPress ~every 12h) while the licence is active; re-downloadable from your account anytime.
- Download Key activation — a Download Key emailed after purchase unlocks updates; no external account or runtime dependency beyond the entitlement check.
- Fail-open licensing — licensed sites keep working through gateway outages (last-known-good), while genuinely unlicensed installs are blocked.
- Sold per platform — the Joomla licence covers the lead-capture package; the WordPress edition is a separate product (both one-time, EUR 19).
- Requirements — Joomla 5.x/6.x or WordPress 6.0+, PHP 8.1 or newer.
Joomla & WordPress
- Joomla — the shortcode also renders in the final HTML body (works in YOOtheme/footer/custom modules); CAPTCHA reuses the site's configured plugin with a reCAPTCHA v3 fallback; managed under Components → GMC Lead Forms; ships as a single package (component + system plugin) — always install the
pkg_…zip, not the inner zips. - WordPress — brings its own reCAPTCHA v3 (site + secret key, score/action checked) rather than a site CAPTCHA plugin; managed under Settings → GMC Lead Forms / GMC Lead Submissions; ships English/Italian/Spanish translations. Feature set (fields, conditional/multi-step, file upload, modal, templates, autoresponder, webhook, Brevo, double opt-in, retention) is kept at parity with the Joomla edition.
FAQ
- Does it store leads?
The first release is email-first. Configure the recipient and make sure SMTP is reliable.
- Can I change fields?
Yes, allowed fields are controlled through the shortcode/options.
- Is it a replacement for big form suites?
It is intentionally lighter: best for contact, quote and enquiry flows.
Privacy notes
Lead forms collect personal data. Update purpose, retention and lawful basis in your privacy policy.
