INTEGRATION GUIDE · WORDPRESS & CMS

WordPress Contact Form Integration Without SMTP Plugins

Eliminate failed wp_mail() deliveries, cleartext password storage in wp_options, and bulky plugins by routing WordPress contact submissions directly to Lugatu form endpoints.

Connect WordPress Form → Explore Next.js Guide

1. The Problem with WordPress SMTP Plugins

Most WordPress sites rely on plugins like WP Mail SMTP to send contact notifications via PHP mail() or stored SMTP credentials. When hosting IP addresses change or hosting providers block port 587/465, inquiries are silently lost.

2. Server-Side Integration via wp_remote_post()

For theme developers and custom plugins, forward form submissions securely from your WordPress server using your workspace API key without exposing secrets to frontend visitors.

functions.php php

<?php
// Secure WordPress server-side form forwarding
function handle_custom_contact_submission() {
    if ( ! isset( $_POST['contact_nonce'] ) || ! wp_verify_nonce( $_POST['contact_nonce'], 'contact_action' ) ) {
        wp_send_json_error( array( 'message' => 'Security check failed.' ), 403 );
    }

    // Silently drop automated spam if honeypot trap is filled
    if ( ! empty( $_POST['_gotcha'] ) ) {
        wp_send_json_success( array( 'message' => 'Thank you! Message received.' ) );
        return;
    }

    $name    = sanitize_text_field( $_POST['name'] ?? '' );
    $email   = sanitize_email( $_POST['email'] ?? '' );
    $message = sanitize_textarea_field( $_POST['message'] ?? '' );

    $payload = array(
        'fields' => array(
            'name'    => $name,
            'email'   => $email,
            'message' => $message,
        ),
    );

    $api_url = 'https://www.lugatu.com/api/v1/forms/' . LUGATU_FORM_GUID . '/submissions';

    $response = wp_remote_post( $api_url, array(
        'headers' => array(
            'Authorization'   => 'Bearer ' . LUGATU_API_KEY,
            'Content-Type'    => 'application/json',
            'Idempotency-Key' => wp_generate_uuid4(),
        ),
        'body'    => wp_json_encode( $payload ),
        'timeout' => 10,
    ) );

    if ( is_wp_error( $response ) || wp_remote_retrieve_response_code( $response ) >= 400 ) {
        wp_send_json_error( array( 'message' => 'Failed to deliver message.' ), 500 );
    }

    wp_send_json_success( array( 'message' => 'Thank you! Message received.' ) );
}
add_action( 'wp_ajax_custom_contact', 'handle_custom_contact_submission' );
add_action( 'wp_ajax_nopriv_custom_contact', 'handle_custom_contact_submission' );

3. Direct Sandboxed Embed Iframe Option

If you prefer zero PHP code, embed a published Lugatu form directly on any WordPress page or Elementor HTML block using our sandboxed responsive iframe.

wordpress-embed.html html

<iframe
  src="https://www.lugatu.com/embed/forms/YOUR_PUBLIC_FORM_ID"
  width="100%"
  height="540"
  frameborder="0"
  style="border:none; border-radius:16px; overflow:hidden;"
  title="Contact Form">
</iframe>

Security & Authentication Invariant

Security Instruction: Define LUGATU_API_KEY inside wp-config.php outside the web root, never in client-accessible scripts or public theme files.

Troubleshooting & Common Ingestion Errors

wp_remote_post() returns cURL error 28: Connection timed out

Ensure your hosting provider allows outbound HTTPS traffic on port 443 to www.lugatu.com.

Frequently Asked Questions

Do I need to install a special plugin to use Lugatu on WordPress?

No. You can either use our lightweight official WordPress connector or simply embed forms using standard HTML iframe or AJAX snippets.

Ready to create your form endpoint?

Get started for free in seconds. No credit card required.

Start Free →