DEV3 Technologies · own product
Our own WordPress plugin: visitors paste a signature or a long message and AI fills the empty form fields, while every submission is scored for spam and abuse before the notification email goes out.
Client systems are private — screenshots shown where permitted.
A messy pasted message fills 6 empty fields, including the phone number in E.164 format, with an Undo button. The form is never submitted automatically.
Contact forms have two problems that pull in opposite directions. Genuine visitors, often on a phone, have to retype details they already have in an email signature or a message, and they make typos in email domains and phone numbers. Meanwhile the same form attracts link-building pitches, crypto scams and abusive messages that CAPTCHAs and keyword filters only partly stop. An AI can help with both, but a public endpoint that calls a paid AI API is also an attack surface: bots can point it at arbitrary forms, burn the site's API budget, or try to make it fill hidden fields. And the plugin has to work inside three very different form builders (Contact Form 7, WPForms and Gravity Forms), each with its own field model, spam handling and settings UI.
We built one plugin with a builder-neutral core and one adapter per form builder. The browser never tells the server what the form looks like: the server rebuilds the field schema from the stored form every time.
{ id, name, label, type, required, options[], role }. Paste-to-fill, corrections and the spam gate only ever see that shape./parse route takes only a form key, a token and the pasted text. Target fields, labels and choice options come from get_fields() on the server, and the AI's answer is constrained by a response schema whose id is an enum of those fields.gmial.com → gmail.com), E.164 phone formatting for 70+ countries and name casing run locally in the browser, with no network call.Spam_Gate returns allow, block, spam or flag; the adapters translate that into wpcf7_spam / wpcf7_before_send_mail, WPForms' wpforms_process errors and spam_reason, or Gravity Forms' gform_validation / gform_entry_is_spam.The plugin is PHP 7.4+ with a React admin built with @wordpress/scripts. A shared core used across DEV3's plugins provides the Google Gemini API client (structured output with maxLength caps, gemini-2.5-flash by default), encrypted key storage, rate limiting, usage logs and licensing. On top of it sit the three adapters, the paste-to-fill extractor, the classifier, the spam gate and the log repository. Each builder gets a native settings panel: a CF7 editor tab, a WPForms Settings section with a per-field "Smart paste source" toggle, and a Gravity Forms Form Settings section.
The plugin is complete and is being prepared for release on CodeCanyon and the DEV3 marketplace. What was built and verified:
admin_password field never reaches the prompt or the response.DEV3 Technologies · own product · WordPress plugins
Our own WordPress plugin: AI copywriting, SEO meta, image alt text and a layout generator that turns a one-line prompt into native Elementor containers or WPBakery rows, built on the Google Gemini API with the site owner's own key.
DEV3 Technologies · own product · E-commerce (WooCommerce)
Our own WooCommerce plugin: it turns a product's approved reviews into pros and cons, a sentiment bar, quality, value and fit scores, treating every review as untrusted data and calling the AI only when the review set changes.
DEV3 Technologies · own product · E-commerce (WooCommerce)
Our own WooCommerce plugin: it scores abandonment risk, lets the Google Gemini API propose a personal single-use coupon, then clamps every offer on the server to the merchant's caps, per-product margin floor and daily budget.
