WPQuoteCalSecurity
Designed for lead data and proposal workflows.
WPQuoteCal captures business enquiries, so the public security story needs to be clear from day one.
Admin capabilities
Admin pages are protected by custom WordPress capabilities for calculators, leads, templates, settings, integrations and licence management.
Nonces
All admin actions and frontend submissions use nonce checks to reduce unauthorized requests.
Sanitization
Submitted fields, URLs, currency values, settings and webhook payload fields are sanitized before storage or output.
Consent capture
Lead capture requires visitor consent before storing enquiry details.
Protected PDFs
Generated PDFs are stored under protected WordPress uploads paths with index and access-control files.
Signed webhooks
Webhook and SaaS subscription sync payloads support HMAC signatures.