=== EPA Formularios ===
Contributors: elpuntoazul
Tags: contact form, smtp, turnstile, captcha, antispam
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.1.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Lightweight contact form with SMTP delivery configurable from the dashboard and antispam protection via Cloudflare Turnstile.

== Description ==

EPA Formularios adds a lightweight, dependency-free contact form with two key
pieces configurable from the dashboard:

* **SMTP delivery.** Set host, port, encryption (TLS/SSL), username, password and
  sender so emails go out through your own mail server.
* **Antispam protection with Cloudflare Turnstile.** Widget on the form and
  server-side token verification.

The form is inserted through an editor block and validates fields server-side
before sending the email to the configured recipient. It also includes a hidden
honeypot field as an extra antispam measure and protects submissions with a
WordPress nonce.

= External services =

* **Cloudflare Turnstile.** For antispam protection, the plugin loads the widget
  script from https://challenges.cloudflare.com on pages that show the form, and
  on submit it verifies the token against
  https://challenges.cloudflare.com/turnstile/v0/siteverify (the visitor-generated
  token, your secret key and the visitor IP are sent). This only happens if you
  configure the Turnstile keys. Terms: https://www.cloudflare.com/website-terms/ - Privacy: https://www.cloudflare.com/privacypolicy/
* **SMTP server.** Form emails are delivered through the SMTP server you configure
  (a third party of your choice). The plugin does not send data to any other
  service.

== Installation ==

1. Upload the `epa-formularios` folder to `/wp-content/plugins/` or install it
   from the Plugins screen.
2. Activate it.
3. Open the plugin settings and configure the SMTP details and, optionally, the
   Cloudflare Turnstile keys.
4. Insert the contact form block on the page you want.

== Frequently Asked Questions ==

= Is Turnstile required? =

No. If you do not configure the Turnstile keys, the form works without the captcha
(though enabling it is recommended to reduce spam).

= Where do the messages go? =

To the destination email you configure, delivered through your SMTP server.

== Changelog ==

= 1.1.0 =
* New setting: a thank-you URL the visitor is redirected to after a successful submission.
* Turnstile script loaded through the WordPress script queue.

= 1.0.0 =
* Initial release.

== Upgrade Notice ==

= 1.1.0 =
Optional thank-you page after a successful submission. No configuration changes required.
