MachForm 23 Released. Key Updates in Maintenance and Security.

We’re happy to share that MachForm 23 is here, bringing some important updates to keep your forms running smoothly and securely. In this release, we’ve upgraded the core JavaScript libraries—like jQuery, which is used across both the backend admin panel and live forms, and Kendo UI, which powers our chart generation—to their latest versions. These upgrades mean improved stability, performance, and a smoother experience for you.

 
We’ve also addressed an important security vulnerability related to PayPal’s Instant Payment Notification (IPN) to ensure your payment processing remains secure. Updating to MachForm 23 will help you stay on top of these improvements, so we recommend making the switch whenever you’re ready!

Changelog

  • Update: Updated jQuery library with the latest version (v3.6.1)
  • Update: Updated chart library (KendoUI) with the latest version (v2024.3.806)
  • Security: Addressed potential security vulnerability related to PayPal IPN handling
  • Improvement: Added search box on add/edit user permission page
  • Bugfix: Index length issue on ap_session table when using MySQL 5.7
  • Bugfix: Unable to connect to SMTP server using Non TLS or self-signed SSL certificate

PHP & MySQL Version Requirement

MachForm v23 requires the minimum version of PHP on your server to be at least PHP 7.4 and MySQL version at least MySQL 5.7. If you’re still using an older version, you’ll need to upgrade your PHP and/or MySQL version first.

How to Update

This update is FREE for all users with an active support contract.
As mentioned above, you can download it in the Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, no further action is required on your part. We automatically update the MachForm version for all our cloud users with the latest version.

MachForm 22 Released. Security Update.

MachForm 22 is now available for download on Billing Area. This release brings important security updates and bug fixes. We STRONGLY encourage you to update your MachForm immediately.

Security Updates

  • Remote Command Execution. We have addressed a potential vulnerability that could allow remote command execution under specific conditions.
  • Cross-Site Scripting (XSS). We have resolved an issue related to cross-site scripting.

Technical Details

The technical details of these vulnerabilities will be published later in the CVE database. We will update this post with the corresponding CVE IDs once they are available.

(UPDATE) List of published CVE IDs:

Acknowledgments

We would like to extend our gratitude to Luca Bertaccini for his diligence and expertise in identifying these vulnerabilities.

PHP & MySQL Version Requirement

MachForm v22 requires the minimum version of PHP on your server to be at least PHP 7.4 and MySQL version at least MySQL 5.7. If you’re still using an older version, you’ll need to upgrade your PHP and/or MySQL version first.

How to Update

This update is FREE for all users with an active support contract.
As mentioned above, you can download it in the Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, no further action is required on your part. We automatically update the MachForm version for all our cloud users with the latest version.

MachForm 21 Released. PHP 8.3 Compatibility.

Howdy folks!

PHP 8.3 was officially released to general availability on November 23, 2023. It is a major update of the PHP language and contains many new features and performance improvements.

Today, we’re happy to let you know that we’ve just released MachForm 21, which is fully compatible with PHP 8.3.

PHP 8.3 Compatibility - MachForm

 

The new version of MachForm (version 21) is now available for download in the Billing Area.

PHP & MySQL Version Requirement

MachForm v21 requires the minimum version of PHP on your server to be at least PHP 7.4 and MySQL version at least MySQL 5.7. If you’re still using an older version, you’ll need to upgrade your PHP and/or MySQL version first.

This is a maintenance release and we recommend upgrading if you’re using PHP 8.3.

Changelog

  • Update: PHP 8.3 Compatibility
  • Update: Replaced the deprecated Swiftmailer library with PHPMailer for sending emails
  • Update: Now uses “UTF8MB4” as the character set for MySQL tables, to support emojis in form fields
  • Bugfix: The Rating widget on the shared report doesn’t display correctly
  • Bugfix: Unable to use ‘&’ on form redirect URL
  • Bugfix: Approval conditions don’t work on reports and exports

How to Update

This update is FREE for all users with an active support contract.
As mentioned above, you can download it in the Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, no further action is required on your part. We automatically update the MachForm version for all our cloud users with the latest version.

MachForm 20 Released. Require Form Users to Login with OTP.

Howdy, folks! 🙂

Ever needed to create private forms that collect sensitive information and allow access only to a specific list of users? Now, you can easily do this with MachForm v20!

 

Form Requires User Login

 

In addition to the existing functionality that lets you set a password for your forms, you can now specify a list of users (using their email) to restrict access to your form.

 

Restrict Access to Form

 

Any user attempting to access the form will be required to log in before they can view and submit it. Users will be prompted to log in using their email and a one-time password (OTP) sent to their email.

 

Form OTP

 

Combine this new functionality with the “Data Encryption” feature on your form, and you’ll have very secure forms built in minutes!

The new version of MachForm (version 20) is now available for download on Billing Area.

PHP & MySQL Version Requirement

MachForm v20 requires the minimum version of PHP on your server to be at least PHP 7.4 and MySQL version at least MySQL 5.7. If you’re still using older version, you’ll need to upgrade your PHP and/or MySQL version first.

We strongly recommend upgrading due to improved compatibility and bugfixes within this release.

Changelog

  • Feature: Require form users to login before submitting forms
  • Feature: Added option to do range limit by ‘digits’ on Single Line Text field, to accept only numbers and allow leading zeros
  • Feature: Added option to set max rows per page on entries page
  • Improvement: Form builder page now able to fix and cleanup malformed HTML tags
  • Improvement: Added option to specify MySQL SSL Cert and custom port number
  • Improvement: Automatically-enabled CAPTCHA and submission limit on form receiving high amount of bot submissions
  • Improvement: Allows advanced CSS on theme editor to use @import statement
  • Update: Removed ‘Javascript jQuery’ embed code
  • Update: Added configuration to enforce backend tables to use MyISAM engine
  • Update: On forms having CAPTCHA enabled, CAPTCHA is now enforced on every submission, not just the first one
  • Bugfix: On the form manager page, the search doesn’t work properly when the form is having character ‘#’ as part of the title
  • Bugfix: Syntax error on mf.js, particulary inside the try..catch block, preventing the form from being loaded on web view of windows app
  • Bugfix: When success message contains any HTML tag, it won’t be enclosed with H2 tag to allow custom formatting
  • Bugfix: Dompdf compatibility with PHP 8.1
  • Bugfix: Export entries failure on some specific conditions when entries are sorted
  • Bugfix: Digits validation on Number field can be bypassed using leading zeroes
  • Bugfix: User able to submit additional multiple payments (Braintree, Authorizenet) on existing entries
  • Bugfix: Major incompatibility change with new Stripe API as of version 2023-08-16. Related with payment_method_types parameter
  • Bugfix: User shouldn’t be automatically logged-in after doing password reset
  • Bugfix: Unable to save form edits due to ‘column already exist’ SQL error
  • Bugfix: Image alignment not being set on PDF and email content
  • Bugfix: Entries not being highlighted correctly when selected
  • Bugfix: “X-Forwarded-For” header abused by spam bots to bypass ip address submission limit
  • Bugfix: Validation to disable future dates selection on date field is not working

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, there is no further action required on your side. We automatically update MachForm version on all our cloud users with the latest version.

MachForm 18.1 Security Release

MachForm 18.1 is now available for download on Billing Area. This is a critical security release for previous versions, particularly for those running Apache web server with a specific configuration. We STRONGLY encourage you to update your MachForm immediately.

Detailed information regarding the security issue will be published later. This is necessary, so that other MachForm users will have enough time to update their installation.

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

Update Support

If you, for any reason, can’t update your MachForm to v18.1, or you don’t have an active support contract, we can send you a patch for your current version. Simply contact us directly and we’ll assist you further.

MachForm Cloud Users

There is no further action required on your side. MachForm Cloud is not affected with this issue.

MachForm 18 Released. Mobile-friendly Admin Panel

All forms generated by MachForm have been responsive, mobile-friendly design, since a long time ago. However, the admin panel dashboard never receives an update on this area.

Mobile-friendly Admin Panel

Today we’ve improved the admin panel dashboard and made it accessible through mobile devices. You can easily access your forms and data using interfaces optimized for your smartphone.Mobile Friendly Admin Panel

You still can’t build/edit your forms through the mobile-friendly interface but you can easily access your form entries (edit/delete) or change settings (notifications) or approve/deny entries when you have the approval workflow feature enabled.

Customizable Address Field

We’ve also made some improvements with the address field.

We received many feedback (a lot of it!) regarding the subfields label placement and now we’ve moved the subfields label to be above the field (instead of below). This should avoid any confusion with your users when filling the address field.

New Address Field

You can also completely adjust the subfields labels and individual subfield visibility! You can choose to show/hide any part of the address field.

Address Field Visibility

So here you go, a fully customized Address field 🙂

These new features are part of the latest version of MachForm (Version 18) which we’ve just released today and it is now available for downloads on Billing Area.

This update added several new features, improvements, and bug fixes. We recommend you to upgrade due to improved functionalities within this release.

Changelog

  • Feature: Mobile-friendly Admin Panel Dashboard
  • Feature: Fully Customized Address Field Labels and Visibility
  • Update: Added Romanian Lei currency
  • Update: Added Kosovo into the country list
  • Bugfix: Using empty date as condition on entries page display error message under MySQL 8
  • Bugfix: “Admin only” dropdown fields doesn’t populate the option when creating the filter on entries page
  • Bugfix: Updating Dropdown/Multiple Choice values doesn’t update keywords on Logic rules and report filters as well
  • Bugfix: On a form with ‘edit entry’ enabled, file upload fields always display “required” error message on live form edit entry page, even if there is file exist already
  • Bugfix: Garbled email content (raw text) when running under PHP 8.x
  • Bugfix: Edit link doesn’t work when form limit submission enabled and reached the limit
  • Bugfix: Filtering entries using the first field on the form as the condition doesn’t work
  • Bugfix: Chrome and Firefox blocked cross domain session cokies. Embedding forms across different domain caused session expiry issue
  • Bugfix: Pressing enter on ‘decrypt entry’ dialog generate some error message

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, there is no further action required on your side. We’ve automatically updated MachForm version on all our cloud users with the latest version. You can use the new features right now!

MachForm 17 Released. New Rating Field!

Howdy folks! 🙂

We’ve been working hard since our last update and I’m happy to let you know that we’ve added several exciting new features into MachForm!

New Rating Field!

Most of you most likely have been using the Multiple Choice field to collect feedback from users, which works great but is quite basic. You can now do the same thing with a more visually appealing field, the Rating field!

New Rating Field

The rating field is highly customizable. You can collect 1-10 ratings using several types of icons (star, heart, thumb, etc). You can add rating labels underneath the rating icons.

Rating Field Options

You can also use the rating field when building logic on your form.

Rating Scorecard Widget

Once you’ve collected those feedback from your users using the Rating field, you can now easily display the result using the new Rating Scorecard widget under the Report section of your form.

Rating Scorecard

You can choose to show/hide the rating bars, total entries, title and even filter the entries being used to generate the rating scorecard.

Keyword Blocking

In addition to the spam protection option (CAPTCHA), you can now enable Keyword Blocking on your form to further protect your form from spam submission.

Specify keywords that you believe are being used for spam and your form will automatically discard any submission containing any of the keywords.

Keyword Blocking

 

Approval Workflow Email Customization

Yes, finally, just like the email content template that is fully customizable, you can now also customize the approval workflow email and use merge tags!

Approval Workflow Email Template

These new features are part of the latest version of MachForm (Version 17) which we’ve just released today and it is now available for downloads on Billing Area.

This update added several new features, improvements, and bugfixes. We recommend you to upgrade due to improved functionalities within this release.

Changelog

  • Feature: New Rating Field
  • Feature: New Rating Scorecard Report Widget
  • Feature: Keyword Blocking on form submissions
  • Feature: Customizable Approval Workflow Email Content
  • Feature: Recent Emails suggestion on email entry page
  • Feature: Entries Grid widget now support filtering
  • Update: PHP 8.1 Compatibility
  • Update: MySQL errors will be logged into PHP error log file
  • Update: Improved accessibility for screen readers on error messages and grouped fields
  • Update: Grid widget now will display all selected columns
  • Update: Added option to pass user and password to bind Active Directory (user:pass@ldap-hostname)
  • Update: Removed Deprecated PayPal Pro REST API for new forms
  • Update: Added option to force clear entries filter using “clear_filter=1” parameter on entries page
  • Bugfix: Forms having signature fields doesn’t display submit button on review pages
  • Bugfix: The “delay notification until paid” option doesn’t work properly on a form having payment and approval enabled at once, logic notifications and integrations doesn’t work
  • Bugfix: “Todays entries” count doesn’t reset correctly
  • Bugfix: “Session expired” error on payment pages for Authorize.net, Braintree, PayPal REST
  • Bugfix: “ID required” error on payment pages
  • Bugfix: Unable to approve entry on view entry page
  • Bugfix: Field logic conditions doesn’t consistently ignore HTML tags
  • Bugfix: Unable to import form from previous versions
  • Bugfix: Empty merge tag for signature field doesn’t generate empty data
  • Bugfix: Some tables not being cleared when a form being deleted
  • Bugfix: Disabled/deleted forms still able to accept payments
  • Bugfix: Edit link shouldn’t be prompted for form password any longer
  • Bugfix: The PDF export on entry page is missing the form title

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, there is no further action required on your side. We’ve automatically updated MachForm version on all our cloud users with the latest version. You can use the new features right now!

MachForm 15 Released. Share forms with other users.

Howdy folks! 🙂

Previously, when you need to share your form with other users, you’ll need to become an administrator or contact your administrator to change the permissions of your form.

Using the new manage access feature, you can now do this on your own!
To use this feature, you can go to your Form Info page.

Form Info - MachForm

and then choose manage access

Manage Access - MachForm

You’ll be able to assign specific permissions for each user:

Manage Access - MachForm

This new feature is part of the new version of MachForm (Version 15) which we’ve just released today and it is now available for downloads on Billing Area.

This update added new feature and bugfixes. We recommend you to upgrade due to improved functionalities within this release.

Changelog

  • Feature: Allow users to share forms on their own
  • Feature: Added option to open a blank new form when running under “edit entry” mode
  • Bugfix: User without ‘edit entry’ permission shouldn’t be able to see the edit link on entry
  • Bugfix: ‘exif_read_data()’ warning message upon upload
  • Bugfix: ‘mime_content_type()’ error message upon upload
  • Bugfix: When default admin theme is not vibrant, user won’t be able to choose vibrant as their preferred theme
  • Bugfix: Compatibility issue with the webhook sending incorrect Authorization: BASIC header
  • Bugfix: Compatibility with PHP 7.4 when sending using SMTP
  • Bugfix: Stripe compatibility issue with PHP 7.4
  • Bugfix: Signature images has wrong path on windows server when MachForm installed on root domain
  • Bugfix: On a single-page form, submitting a new form immediately after editing an entry will overwrite the data to the previously edited entry
  • Bugfix: Edit entry on form with payment and ‘delay notification until paid’ turned on won’t resend notification
  • Bugfix: Edit entry on form having payment enabled and review page will always redirect to payment page, even if the status already paid
  • Bugfix: Saving error when the form is having ‘Allow Users to Save and Resume Later’ and ‘Allow Users to Edit Completed Submission’ turned on at the same time
  • Bugfix: The “Default From Name” is not being used when creating new forms
  • Bugfix: Improved accessibility with text captcha
  • Bugfix: Improved accessibility on submit buttons
  • Bugfix: New Stripe API keys are 255 characters long, the old one are 50 characters long
  • Bugfix: Activity log not deleted when delete ALL entries, reset the entries ID or delete with MF_CONF_TRUE_DELETE enabled
  • Bugfix: Entry’s ‘Date Created’ is being overwritten incorrectly when both Edit Entry and Resume feature enabled
  • Bugfix: When email subject is having quotes characters and PDF enabled, the PDF can’t be attached
  • Bugfix: Variable typo on confirm page
  • Bugfix: Fixes error message ‘implode(): Passing glue string after array is deprecated’
  • Bugfix: Date field can’t handle “is empty” condition on entries/grid page
  • Bugfix: First attempt on solving captcha always resulted to failure
  • Bugfix: When ‘enable choice limit’ turned on and limit has reached maximum, admin can’t edit the entry
  • Bugfix: Webhook won’t be send any longer when the target URL doesn’t have path/only domain
  • Bugfix: Added config option to enable/disable SQL debug mode
  • Update: Internal CAPTCHA no longer uses session
  • Bugfix: Theme not applied in form locked when user not set theme in their profile
  • Bugfix: Entries column preferences not deleted when field has been deleted
  • Bugfix: Removed hard coding on default name and from email address in logic notification
  • Bugfix: mf.js generate console error message when receiving postMessage from external script

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, there is no further action required on your side. We’ve automatically updated MachForm version on all our cloud users with the latest version. You can use the new features right now!

MachForm 14 Released. Allow Form Users to Edit Completed Submission!

Howdy folks! 🙂

By default, once a form has been submitted by the end-users, the form data can’t be updated any longer by the end users and only admin having the ability to edit the data.

In some cases, you might need to allow your form users to modify their submission on a later date.

Using the Allow Users to Edit Completed Submission feature, you can do this easily. When you enabled this feature, the end-users will see an edit link on the success page of the form and receive a confirmation email containing the edit link as well (you’ll need to enable confirmation email on your form).

Edit Completed Submission - MachForm

To enable this feature on your form, edit your form, click the Form Properties tab and click the show more options link. Then check the Allow Users to Edit Completed Submission option.

Edit Completed Submission - MachForm

For more details, please check Allow Users to Edit Completed Submission in MachForm.

This new feature is part of the new version of MachForm (Version 14) which we’ve just released today and it is now available for downloads on Billing Area.

This update added new feature and bugfixes. We recommend you to upgrade due to improved functionalities within this release.

Changelog

  • Feature: Allow Users to Edit Completed Submission
  • Bugfix: Braintree payments deprecated issue
  • Bugfix: Theme selection not available on user profile page when LDAP enabled
  • Bugfix: On multipage form, logic emails are being sent twice when the skip page logic to success page is active
  • Bugfix: Any field with field visibility “Hidden” and “required” at the same time is causing validation error and prevent the form from being submitted
  • Bugfix: Submitting payment on Stripe for recurring payment with setup fee generate “Received unknown parameter: account_balance” error
  • Bugfix: Resuming deleted incomplete entries shouldn’t be possible
  • Bugfix: Can’t decrypt multi-field (address, name, etc) when there is empty field in the middle
  • Bugfix: Editing/adding folder doesn’t work on Edge browser
  • Bugfix: JPEG file sometimes uploaded with incorrect orientation

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, there is no further action required on your side. We’ve automatically updated MachForm version on all our cloud users with the latest version. You can use the new features right now!

MachForm 13 Released. Smart Folders and Dark Mode!

Howdy folks! 🙂

We’re excited to let you know that we’ve added several exciting new features to MachForm!

Smart Folders

We improved the old “Form Filters” functionality and bring it to the next level as Smart Folders!

Smart Folders automatically find and organize forms on your MachForm by your search criteria. Because they update continuously, these folders can save you a lot of time and effort, particularly when you have large amount of forms.

For example, you can create a Smart Folder to get the following:

  • Forms created by a certain user
  • Forms having a specific one or more tags
  • Forms having a specific keyword within the title
  • Forms having X amount of entries within the last X days/months
  • Forms having any entry within the last X day/week/month/year
  • Forms with active status only
  • Forms with deleted status only
  • and many others

Smart Folders

Creating a smart folder is easy and straight forward. Simply create the folder and define the conditions for the folder. You can have as many conditions as you need for each folder.

Adding Smart Folders

Dark Mode

Yes, it’s the same dark mode as you’ve seen on your smartphones! It’s finally coming into MachForm.

When using the Dark Mode theme, MachForm admin panel uses a darker color palette for all screens, views, menus, and controls, and it uses more vibrancy to make foreground content stand out against the darker backgrounds.

Users are now able to choose their own preferred admin panel theme, including the new Dark Mode theme.

 

Dark Mode

These new features are part of the latest version of MachForm (Version 13) which we’ve just released today and it is now available for downloads on Billing Area.

This update added several new features, improvements, security updates and bugfixes. We strongly recommend you to upgrade due to improved functionalities and security updates within this release.

Changelog

  • Feature: Smart Folders
  • Feature: Dark Mode admin panel theme
  • Bugfix: Editing an entry with existing signature field from older version will discard the signature
  • Bugfix: When LDAP enabled (not exclusively), unable to edit users email address & password
  • Bugfix: When review page enabled, logic emails are being sent twice when the skip page logic to success page is active
  • Bugfix: Unable to turn off Apple Pay / Google Pay option on Stripe integration
  • Bugfix: guidelines_bottom should set the width of the field to maximum width
  • Bugfix: Resume link not displayed once an entry has been updated
  • Bugfix: Unable to remove attached files when editing an entry
  • Bugfix: Recurring payment on Stripe marked as Test Mode even when using live keys
  • Bugfix: Customer Name not sent to Stripe correctly
  • Bugfix: Google Sheets/Calendar integration run twice when the form having skip page logic turned on
  • Improvement: Updated DOMPDF library to 0.8.3 for improved result and compatibility with PHP7.3, also avoid being flagged as spam
  • Improvement: Added option to disable links within PDF sent through notification emails
  • Security Update: Prevent null bytes injection attack

How to Update

This update is FREE for all users having an active support contract.
As mentioned above, you can download it on Billing Area.

Follow this upgrade instruction:
Upgrading MachForm Self-Hosted 

MachForm Cloud Users

If you’re subscribed to any of our MachForm Cloud plans, there is no further action required on your side. We’ve automatically updated MachForm version on all our cloud users with the latest version. You can use the new features right now!

Page 1 of 3123