Decryption key:
Bit Form Pro - WordPress Drag & Drop Contact Form, Payment Forms Builder v3.3.2 Nulled
== Changelog ==
= 3.3.2 =
* Release Date: 7 October, 2026
* Heads up:
1. **Update Bit Form to 3.3.2 first.** This release needs the free plugin at 3.3.2; on an older one Pro shows an update notice.
2. **Password Values Are No Longer Stored:** Entries created or edited through the REST API now save Password fields as "**** (encrypted)". Leaving a password blank or masked when editing an entry keeps the stored one, and the edit log only records that it changed. WooCommerce gives new customers a random password they can reset.
* Security:
1. **Blocked IP Message:** The visitor's IP address in the blocked-IP message is now escaped.
2. **Forgot Password:** The form gives the same answer whether or not an account exists, so it can no longer reveal which usernames and emails are registered. No email is sent for unknown accounts.
3. **Admin Approval Emails:** The Approve and Reject links now open a confirmation page, and nothing happens until you click its button. Email security scanners that open every link could otherwise approve or reject an account before you read the email.
4. **Mollie Return Page:** Each customer now sees their own payment after returning from Mollie. With several customers paying at once, one could see another's payment.
* New:
1. **Email OTP Delivery Hooks:** Developers can send the code another way (for example SMS or WhatsApp) with the `bitform_email_otp_send` filter, or forward it after the email goes out with the `bitform_email_otp_sent` action.
* Improvements:
1. **Shortcode Content Filter:** Developers can use the correctly spelled `bitform_filter_shortcode_content`. The old `bitform_filter_sortcode_content` still works but is deprecated.
* Fixes:
1. **Payment Fields:** Stripe, Razorpay and Mollie no longer take a second payment for an entry that is already paid, for example when the form failed to submit after payment and the customer tried again. Needs Bit Form 3.3.2.
2. **Double Opt-In with Bit CRM:** Leads created after a visitor confirms their email keep their custom field values.
3. **Submission Limits:** The Submission Period date range applies only when Custom Date is selected, per minute, hour and day limits count in your site's timezone, and the per-user IP limit works for IPv6 visitors.
4. **Save Draft:** Logged-in visitors get their own draft back instead of entry #1's answers, guest drafts keep every later change, and a submitted or deleted draft starts a new one.
5. **REST API Entries:** Deleting an entry removes its uploaded files too, and hCaptcha and Turnstile tokens are no longer saved as entry fields.
6. **Field Settings:** A Repeater Maximum Row of 0 means no limit instead of one row, Advanced File Upload Readonly and Disabled apply on the form, and the Signature pen width matches the builder.
7. **User Registration and Password Reset:** Registration stops with a clear error when WordPress can't create the user, the reset link works when the page URL has parameters (such as `?lang=fr`), and activation or approval shows the result message when no redirect page is set.
