Knowledge Base

Security Best Practices

The advice and best practices in this section is to help site owners and administrators understand the issues and learn how to adjust the security features according to their needs.

Security Warning: merge tags as HTML attribute values

If your form confirmation is using a merge tag as a value for an HTML attribute, you may see the following warning: Your confirmation message appears to contain a merge tag as the value for an HTML attribute.

Sending Form Submission Notifications To Multiple Recipients

Here’s how to configure your notifications in Gravity Forms to send to multiple email recipients.

Set Tabindex

Having an issue where pressing tab on your keyboard brings your user to another form on your page? That is because Gravity Forms assumes its tabindex values and you can have overlap.

Setting Up Conditional Feeds for Offline Payments

This article covers how to use conditional feeds to manage workflows based on whether users choose online or offline payment methods.

Setting Up Conditional Payments for One Time and Recurring Transactions

This article explains how to use conditional logic to set up payment feeds based on a user’s selected payment frequency.

Setting Up Conditional Payments in Gravity Forms

Sometimes, you may want to allow a user to choose between different payment options. In this article, we will show you how to do this using conditional logic.

Show Values For Choice Based Fields

This article explains how choice values work, why they are useful, when they are required, and how to set them up for your forms.

Starred Entries

Gravity Forms allows you to star entries in the entry list to flag submissions that need attention, such as high-value orders, time-sensitive requests, or reference entries for training. Starred entries can be filtered for quick access from the entries list.

State Validation

State validation enhances form security by ensuring submitted field values have not been altered client-side. When a form is displayed, a state is generated based on the configuration and allowed values of supported fields.