Form tests

Form tests live in the Forms card on the Page checks screen, under Lumtera → Checks → Page checks. Every browser page check you run as yourself lists the forms it finds on the page: Contact Form 7, WPForms, Gravity Forms, the classic WooCommerce checkout and plain HTML forms. Each form shows the page it is on and how many required fields it has.

Only forms with at least one required field are tested, because an empty submission has to trigger errors. Press Test form and Lumtera turns on a safety guard for your login, loads the page again in a hidden frame, and submits the form with every field left empty. It never types into a field and leaves spam traps and captchas alone. It then watches the page for three seconds and turns the guard off again.

The guard is a short-lived token in an HttpOnly cookie, valid for two minutes, for you and your login session only. While it is on, each form plugin's own hooks stop any email, entry or order, even if the empty submission gets past the form's checks. Plain HTML forms are only tested when they post to the page itself or to WordPress's own form handlers, and they are never allowed to leave the frame. Forms that send to another address are listed with the reason and not tested.