MachForm 4.3 Released

MachForm version 4.3 is now available for downloads on Members Area!

This update added two new important features, improvements and bugfixes. As always, we recommend you to update to this version if you’re still using older version.

What’s new in MachForm 4.3


  • When the form being embedded using iframe, it jump itself to the top of the page when hovering into submit button / fields. Happens on Chrome >= v36 only.
  • UTF-8 characters aren’t being displayed correctly on import form page
  • Exporting form may not export logic conditions completely
  • Review page displaying incorrect (NaN) payment amount
  • Table prefix incorrectly hardcoded on post-functions.php
  • Webhook and email logic is being evaluated twice on multipage form
  • On logic settings page, when the first field on the form is choice/dropdown, they keyword is not being populated correctly for email and webhook
  • PayPal payment status always display unpaid. This is due to SSL3 Poodle bug and PayPal is disabling SSL3 for IPN
  • When a time field is being hidden due to logic, the time should be set to null/empty instead of 12:00:AM
  • Added LIMIT 1 clause to prevent cardinality issue when the choic/dropdown options are having duplicate entries on the table
  • CVV / Card Expiry validation is not being handled properly on Stripe live mode. Error message is a bit misleading
  • HTML tags should be stripped on report widget labels
  • When coupon code reduces the total payment price to zero, it shouldn’t redirect to payment page anymore
  • Latest update of Chrome/IE unable to select transparent color on theme editor
  • Unable to completely disable form border on theme editor
  • Section break is not being displayed on plain text mode
  • Option to take photo or video for file upload field on mobile devices is disabled completely. It should be enabled when “allow multiple upload” being turned off
  • When uploading multiple files, the submit button of the form might pushed into the bottom when the files are too many
  • Form not sending email to address containing quote character
  • Optimized code to prevent corrupted matrix columns
  • Incorrect email validation for some new domains on ‘add user’ page
  • Matrix field rows aren’t being sorted correctly on charts, for some cases
  • Unable to set color for form border on theme editor when ‘thin’ border being selected
  • Incorrect word/characters count on text fields when using multibyte characters (Chinese, etc)
  • Timezone is not being set on PHP form file option
  • Calendar picker is not using the correct language as the form

PHP Version Requirement

As of this version (v4.3), MachForm requires the minimum version of PHP on your server to be at least PHP 5.3.0. If you’re still using older version (PHP 5.2), you need to upgrade your PHP version first.

How to Update

This update is FREE for all V4 owners.
As mentioned above, you can download it on Members Area.

If you are currently using v4.x or v3.x, follow this upgrade instruction:
Upgrading MachForm 3.x/4.x to 4.3

If you are still using v2.x, follow this upgrade instruction:
Upgrading MachForm 2.x to 4.3

Enjoy!! :)

LDAP Authentication

With the release of MachForm v4.3, we’ve added a new feature to let your MachForm to authenticate against LDAP server.

What is LDAP?

If you’re not familiar with LDAP already, then most likely you won’t need to use it. LDAP (Lightweight Directory Access Protocol) is mostly used by medium-to-large organizations to provide single sign-on functionality across different applications.

How does MachForm work with LDAP?

Once enabled, all logins will be authenticated against LDAP server. Local MachForm user will be created automatically (if no existing machform user found) for authenticated LDAP login.

Any operation to change login credentials from within MachForm will be disabled and you’ll be able to control it from your LDAP server.

However, to assign custom privileges/permissions, you still need to use MachForm panel.

How to enable?

Simply go to Settings page and turn on “Use LDAP Authentication for Users” option. You’ll be prompted to enter your LDAP server details there.

Supported LDAP Server

MachForm has been tested to work with Active Directory, OpenLDAP and ApacheDS. It should also working with other LDAP servers that support LDAP V3.


This functionality require PHP LDAP extension to be enabled on your server.


LDAP Authentication is only available within MachForm Unlimited license.

MachForm 4.2.3 Security Release

MachForm 4.2.3 is now available for downloads on Members Area. This is a critical security release for previous versions (v3.0 or newer) and we STRONGLY encourage you to update your machform immediately.

Detailed information regarding the security issue will be published later. This is necessary, so that other machform users will have enough time to update their installation.

We appreciated the responsible disclosure of this issue directly to MachForm team, reported by Amine Taouirsa (S2 Groupo).

How to Update

This update is free for all V4 owners.
As mentioned above, you can download it on Members Area.

If you are currently using v4.x or v3.x, follow this upgrade instruction:
Upgrading MachForm 3.x/4.x to 4.2

If you are still using v2.x, follow this upgrade instruction:
Upgrading MachForm 2.x to 4.2

Note for V3 Users

If you, for any reason, can’t update your machform to v4.2.3, we’ve prepared v3.5.4 containing the security fix. You can download it from members area.

Update Support

We will provide full technical support for all affected MachForm users (v3.0 or above), regardless of your support contract period. Please contact us directly if you need further assistance with the update.

If you have customized MachForm, we can help you with the customized update as well.

We recognize how much trust you place in us and we take this responsibility very seriously. We’re sorry for this issue and we’ll help you as hard as we can to update and secure your machform.