Why a Form Beats an Email Address
Posting your raw email address on a page invites spam bots to scrape it within days. A form plugin routes messages through WordPress instead, filtering spam and organizing every submission before it reaches your inbox.
This ties directly back to Day 14 — the form plugin you install today only stays useful once spam protection is active, since a public form without it fills up fast.
- ✓Forms are built with a plugin, then dropped into any page or post using a shortcode or block.
- ✓Submissions can be emailed to you, stored in the dashboard, or both.
- ✓Every public form needs spam protection — never skip that step.
Two Common Options
Both of these were mentioned in yesterday's starter stack. They solve the same problem with different levels of complexity.
Lightweight and free — you write field markup directly, which is great for learning how forms are structured.
Drag-and-drop builder with ready-made templates — faster to set up if you want a polished form immediately.
We'll build the form conceptually so the steps apply to either plugin — the fields and logic are the same either way.
Structuring Your Form
A contact form only needs a handful of fields. Every extra field you add lowers your completion rate, so keep it lean.
// A lean, effective contact form Name // single text field, required Email // required, validated as a real email format Subject // optional dropdown for routing common requests Message // multi-line textarea, required
From Blank Page to Working Form
Client-Side vs Server-Side Checks
What to Check Before You Trust It
Breaking Down What You Just Learned
Forms beat exposed emailsThey route submissions through WordPress instead of scraping bait.
Keep fields minimalName, email, subject, and message cover almost every use case.
Build flowTemplate → add fields → set notification email → embed → publish.
Validate on both endsClient-side checks give instant feedback; server-side checks can't be bypassed.
Always test end to endAn untested form is a form you can't trust with real leads.
Try It Yourself
Add a Subject dropdown to your form with three options relevant to your capstone site (for example: "General Inquiry," "Support," "Partnership"). Test that changing the selection doesn't break submission.
Ship a Working Contact Form
Getting a real form live on your capstone site
By the end of today your Contact page should have a working, tested form connected to your inbox.
- Build the four-field form described in Section 03.
- Set the notification email and confirm spam protection is active.
- Embed the form on your Contact page.
- Run all three tests from Section 06.
- Fix anything that failed and re-test until it passes cleanly.
Recap
Contact Form 7 for lightweight control, WPForms for a visual builder.
Name, email, subject, and message cover most needs.
Client-side for speed, server-side so it can't be bypassed.
Always test empty, invalid, and valid submissions before trusting a form.
Key Takeaways
- A form plugin routes visitor messages through WordPress instead of exposing your raw email address.
- Keep forms lean — name, email, subject, and message cover nearly every use case.
- Validate on both the client and server side; only server-side checks can't be bypassed.
- Always test a form with empty, invalid, and valid submissions before considering it live.
- A public form is only as safe as the spam protection sitting behind it.