=== APlug FormBuilder ===
Contributors: [WORDPRESS-ORG-BENUTZERNAME]
Tags: forms, contact form, surveys, file upload, form builder
Requires at least: 6.4
Tested up to: 7.0
Requires PHP: 8.1
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Gemeinsamer Formularbaukasten für Kontaktformulare, Dateiannahmen, Anträge, Registrierungen und Befragungen.

== Description ==

APlug FormBuilder stellt einen gemeinsamen Feld- und Formularbaukasten für unterschiedliche Dateneingaben bereit. Formulare werden visuell zusammengestellt, in Schritte gegliedert und über Bedingungen gesteuert.

**Enthalten sind:**

* Kontakt-, Dateiannahme-, Befragungs-, Antrags- und Registrierungsvorlagen
* 20 Feld- und Strukturelemente
* Drag-and-drop-Editor mit Formularversionen
* mehrstufige Formulare und Fortschrittsanzeige
* serverseitig erneut geprüfte Bedingungen und Pflichtfelder
* verschlüsselte Einsendungsspeicherung
* private Dateiablage außerhalb der WordPress-Mediathek
* lokale Datei-Sicherheitsprüfung und freiwillige Scanner-Adapter
* Zwischenspeichern von Formularentwürfen
* interne und automatische Bestätigungs-E-Mails
* anonyme Befragungen und Ergebnisdiagramme
* gestapelte CSV-Exporte und automatische Löschfristen
* Gutenberg-Block und Shortcode
* dokumentierte APlug-Dienste, Ereignisse und Erweiterungsschnittstellen

The plugin does not create or publish forms automatically after activation.

== Installation ==

1. Upload the plugin ZIP through **Plugins > Add New > Upload Plugin**.
2. Activate APlug FormBuilder.
3. Open **APlug FormBuilder > Templates** or create an empty form.
4. Configure recipients, storage mode, retention periods, upload rules and consent wording.
5. Publish the form.
6. Insert the **APlug Formular** block or use `[aplug_form id="123"]`.

Before production use, test email delivery, private file access, cron processing and all responsive form steps in a staging environment.

== Frequently Asked Questions ==

= Are submissions stored in plain text? =

No. Stored submission payloads are encrypted with Sodium Secretbox or AES-256-GCM. WordPress security salts are part of the installation-specific key derivation. Changing salts can make existing encrypted payloads unreadable.

= Does the plugin send data to APlug servers? =

No. The plugin core does not contact APlug servers. WordPress email may be routed through the mail service configured for the site. Optional external file scanners require separate registration, disclosure and user consent.

= Is the built-in file check a virus scanner? =

No. It checks file type, size, PHP tags and the EICAR test signature. It is deliberately labelled as a limited local safety check. A professional scanner can be added through the documented adapter.

= Can I create anonymous surveys? =

Yes. Anonymous mode omits direct submitter identifiers. Only fields explicitly configured for reporting are included in local aggregates. Operators remain responsible for the wording, purpose and legal basis of the survey.

= Can forms be embedded without a page builder? =

Yes. Use the dynamic Gutenberg block or the shortcode `[aplug_form id="123"]`.

= What happens when the plugin is deactivated? =

Nothing is deleted. Forms, submissions and private files remain available after reactivation. Full deletion is only performed during uninstall when explicitly enabled beforehand.

== Screenshots ==

1. FormBuilder dashboard with status and quick start.
2. Visual field palette, sortable form canvas and inspector.
3. Multi-step form with progress indicator.
4. Submission detail with protected sensitive-data permission.
5. Private file center with scan and retention status.
6. Anonymous survey result diagrams.
7. Template library for common form purposes.
8. Data retention and uninstall settings.

== Changelog ==

= 1.0.0 =

* Initial prototype release with shared field core, visual editor, submissions, private files, surveys, drafts, queues, exports and documented extension APIs.

== Upgrade Notice ==

= 1.0.0 =

Initial prototype. Test on staging before production use.

== Privacy ==

The plugin can store form values, consent records, files, signatures, drafts, status data and technical security metadata. Submission payloads are encrypted. Retention is configurable per form. WordPress privacy export and anonymization hooks are included. The operator must provide the final privacy notice and define a lawful purpose and retention policy.

== External Services ==

No external service is contacted by the plugin core.

Email is sent through WordPress `wp_mail()`. The website's mail configuration may route messages to an external SMTP or transactional-mail provider; this is controlled by the site operator and is not configured by APlug FormBuilder.

Optional external file-scanner adapters are allowed only when the adapter declares its provider, actual recipient, transferred data categories, privacy policy and terms. If such an adapter is selected for a field, the frontend displays this information and requests explicit consent before transferring a file. No external scanner is bundled or enabled by default.

Optional submission destinations follow the same rule. An external CRM, newsletter, booking or other destination must disclose the provider, recipient, transferred data categories, privacy policy and terms. The form requests separate consent before a configured external destination receives submission data. The built-in local event destination does not leave the WordPress installation.

== Uninstall ==

Deactivation removes no data. During uninstall, capabilities and scheduled events are removed. Database tables and private files are deleted only if the corresponding settings were explicitly enabled before uninstalling.
