Daynis OlmanAI, Cloud & Digital Platform Leader

Gravity Sheets Bridge

A privacy-conscious WordPress plugin connecting Gravity Forms submissions to Google Sheets without customers configuring OAuth applications or Google Cloud service accounts.

Form entries land as spreadsheet rows.

  1. 1. Gravity Forms submission
  2. 2. Validated WordPress bridge
  3. 3. Apps Script receiver
  4. 4. Google Sheets row
Evidence: Open sourceOpen source, WordPress and integration
Role
Author and maintainer
Serves
WordPress site owners using Gravity Forms.
Core technologies
WordPress · PHP · Apps Script · Gravity Forms

Executive overview

The problem. Sending form submissions to a spreadsheet is a common business need, but typical integrations require OAuth apps or service accounts that many site owners cannot set up.

Who it serves. WordPress site owners using Gravity Forms.

What Daynis did. Author and maintainer. A privacy-conscious WordPress plugin connecting Gravity Forms submissions to Google Sheets without customers configuring OAuth applications or Google Cloud service accounts.

Why it matters. Removes setup friction from a common business integration while maintaining security, privacy, reliability and product-quality packaging.

Business architecture and impact

Capabilities created

  • Form submissions delivered to Google Sheets
  • Automatic field discovery
  • No OAuth app or service account required

Removes setup friction from a common business integration while maintaining security, privacy, reliability and product-quality packaging.

System architecture

  1. Site visitors

    Where requests and source data originate.

  2. Gravity Forms

    The interface people use day to day.

  3. Plugin (PHP)

    Orchestrates requests and enforces business rules.

  4. Google Sheet

    The governed system of record.

  5. Google Apps Script receiver

    Connections to downstream and third-party systems.

Governance: Shared secret, formula-injection guard
Delivery: Automated tests & release tooling
When a Gravity Forms entry is submitted, the plugin discovers fields and posts them to a Google Apps Script endpoint owned by the customer, signed with a shared secret. The script validates the secret, neutralises spreadsheet formulas and appends the row. Failures are logged without sensitive data and never block the form submission.

Key flows

  • Site visitors to Gravity Forms
  • Gravity Forms to Plugin (PHP)
  • Plugin (PHP) to Shared secret, formula-injection guard
  • Shared secret, formula-injection guard to Google Apps Script receiver
  • Google Apps Script receiver to Google Sheet

Technical depth

Highlights

  • PHP and WordPress plugin with a Google Apps Script receiver
  • Shared-secret validation
  • Spreadsheet-formula injection protection
  • Privacy-conscious logging
  • Automated testing and release tooling

Architecture decisions

Apps Script instead of OAuth

Customers deploy a script they own, avoiding OAuth app and service-account setup.

Never block the form

Integration failures degrade gracefully so visitors can always submit.

Security and governance

  • Shared-secret validation of requests
  • Spreadsheet-formula injection protection
  • Privacy-conscious logging

What I led

  • Product-quality packaging, testing and release standards

Evidence and links

Evidence: Open sourceReleased as open source.

Building something similar?

Talk to Daynis about open source, wordpress and integration architecture and delivery.

Start a conversation