Rekhu Builder
Forms, plugins and code
Forms built in the site's own form plugin or in Rekhu Builder, plugins for common jobs, and small plugins Rekhu writes for the site.
What this page covers
Much of the work on a WordPress site is not a page: a contact form, a plugin for backups or redirects, a shortcode the theme does not have. Rekhu Builder does these from the chat, with the same care as a page.
Forms
Describe the form, paste its HTML, or take it from a converted template section:
Make a contact form with name, e-mail, phone and a message, sent to info@ our domain, and put it at the bottom of the Contact page.
Which form plugin builds it
- The site runs a form plugin. On a site with WPForms, Contact Form 7, Gravity Forms or Forminator, the form is built in that plugin through its own API, with the fields, the recipient, the thank-you message and the anti-spam it would get by hand. The answer gives the plugin's own edit link and shortcode. Forms in Fluent Forms and Ninja Forms are listed too.
- The site has none. The form is a Rekhu Builder form, placed with the Rekhu Builder Form widget or the
[tbuilder_form]shortcode. It has its own Forms screen in wp-admin with its entries.
Ask "where is my form" and you get one answer, whichever plugin holds it.
How a Rekhu Builder form is protected
Every form has a CSRF token, a honeypot and a rate limit. On top of that you can add:
- a spam challenge, Cloudflare Turnstile or Google reCAPTCHA, with both of its keys;
- an e-mail confirmation: a code goes to the sender before an entry counts;
- stored entries, readable on the site and from the project chat.
Defaults for every form
- Open Preferences → Forms.
- Set where entries go. Empty means the site's admin e-mail.
- Choose the spam challenge and paste its site key and secret key, or leave both empty.
- Choose whether to confirm the sender's e-mail and whether to keep entries on the site.
- Save changes. Every new form Rekhu builds uses these, unless you ask otherwise.
The form's look follows the widget's Style panels (fields, labels, button and card), so you can ask Rekhu to match a screenshot of a form.
Plugins and the toolbox
For common jobs Rekhu knows a free plugin that does it well, installs it when it is missing, and tells you where its results are:
| Job | What Rekhu does |
|---|---|
| Security scan | Malware scan, firewall, login protection |
| Broken links | Finds dead links and missing pictures across the site |
| Speed and cache | Caching and cleanup |
| Backup | A backup plugin, next to the account's own backups |
| SEO check | An SEO plugin when the site has none |
| Analytics | Site statistics |
| Cookie banner | Consent for cookies |
| Redirects | Old addresses sent to new ones |
| Languages | A multilingual site |
| Image optimisation | Smaller pictures |
Run a security scan of this site and tell me what it found.
For a feature the site lacks, Rekhu searches WordPress.org for a well-rated, recently updated, widely installed free plugin, installs and activates it, sets it up through its options and says what it installed and why.
Updating plugins
Which plugins are out of date, and update them.
Rekhu updates the plugins to the versions WordPress.org offers, one at a time; each stays active, and an update that fails is reported by name.
When to be asked first
To keep plugin installs under your control, switch on Ask before installing or activating a plugin under Preferences → Safety, or switch the plugin tools off for one site on its Connection tab. See Sites and keys.
Code of the site's own
When a job needs code no installed plugin offers, such as a shortcode, a post type with its archive, or a small integration, Rekhu writes a small plugin for the site.
Add a post type "Vehicles" with an archive page, and a shortcode that shows the three newest.
The plugin is made with care:
- It lives in its own folder under
wp-content/plugins, marked as Rekhu Builder's. - Every PHP file is parsed before it is written, so a syntax error never reaches the site.
- Calls a site plugin never needs, such as running shell commands or
eval, are refused. - Activation is guarded: an error while loading is caught and the plugin stays off.
- After activation the site is opened once. A critical error on the front or in the REST API switches the plugin off again, and the answer says what happened.
Only plugins Rekhu Builder wrote are ever changed or removed this way. Plugins from WordPress.org and your own are never touched.
Laravel and Odoo
On a Laravel app, Rekhu Builder reads the code, the logs and the failed jobs, checks the packages and runs the tests. On an Odoo database it designs, builds, tests and upgrades custom modules. The quick actions in a new chat are the usual start.
Next
- Changes to live pages: what happens when a form goes onto a published page.
- Schedules: plugin checks and backups on a rhythm.