Hijack forms: live-test any client form straight to your own inbox

Flip on Hijack forms from the admin bar, enter your email, and every notification you trigger while testing goes to you instead of the client. Auto-disables after the window you pick.


July 7, 2026 · Formitor

Every WordPress developer knows this dance: you need to test a client’s contact form, but the notifications go to the client. So you either warn them to ignore the next few emails, or you edit the form’s recipient, test, and hope you remember to change it back. Forget once and the client’s leads route to your inbox for a month.

Hijack forms ends the dance.

How it works

Turn on Hijack forms from the top admin bar (it shows on the front-end pages too, so you can enable it right where you’re testing). Enter one or more email addresses; it defaults to your own. From that moment, every form notification you trigger while testing goes to those inboxes instead of the client’s.

Then it cleans up after itself: the mode turns off automatically after the window you pick. No sticky note required, no recipient left pointing at you.

Two guarantees make it safe to use on production sites:

  • Real visitor submissions are never affected. Only your test submissions are redirected. A genuine lead that arrives while hijack mode is on goes to the client as normal.
  • No per-form editing. You don’t touch the form’s notification settings at all, so there’s nothing to forget to revert.

Why it exists

Because “did the client actually receive that email” is a question you sometimes need to answer with your own eyes, on Gmail, on Outlook, wherever. Formitor’s scheduled checks verify delivery automatically around the clock; hijack mode is for the hands-on moments: after a migration, mid-debugging, or while wiring up a new form.

Ships in plugin v0.2.23. Push it to your fleet from the dashboard in one click.

Keep reading

Product update · Jul 10, 2026

Connect an AI agent to Formitor over MCP

Generate a read-only token and let Claude or any MCP-capable agent list your sites, ask what's broken right now, pull a site's full status, and read recent alerts.

Read post
Product update · Jul 1, 2026

A deep security pass across the whole platform

Stricter database access rules with uniform MFA enforcement, hardened request validation on every site-facing check, per-account rate limits, checksum-verified plugin updates, and integrity-pinned dashboard scripts.

Read post
Product update · Jun 12, 2026

Mail Log: search every form test result across every site

A searchable, cross-site view of every check result. Filter by site, form, delivery status or date range, or free-text search by email, subject, error message, or source page. Matching filters in wp-admin too.

Read post
Product update · Jun 5, 2026

Deep browser checks: a real browser fills your form, and you get the screenshot when it fails

Tier-3 deep checks are live for Pro subscribers. A headless browser fills out the form and clicks Submit like a visitor would, catching what server-side checks can't see, with a screenshot of the exact moment it got stuck.

Read post
Product update · Jun 2, 2026

Update the Formitor plugin on your whole fleet from one button

One click pushes the latest plugin to every connected site with a per-site result, sites keep themselves current automatically afterward, and outdated sites are flagged on the dashboard.

Read post
Product update · May 28, 2026

Pause controls at every level, and a 7-day history on every form

Pause a form for 1h, 4h, 24h or until you resume; pause a whole site while it's being worked on. Timed pauses resume themselves. Plus a History view of every form's last 7 days of checks.

Read post

Catch the failure before the client does.

Free plan: 2 sites, every feature, no card. See what it finds.