Onlinefotka SMTP Mail

Tracking & reports

• Open and click tracking for HTML emails (signed redirect links – no open redirect)
• Reports – daily chart, totals, open and click rate, statistics by plugin and by connection
• Weekly summary email
• Dashboard widget

Alerts

Get notified when an email cannot be sent: email, Slack, Discord, Telegram or a custom webhook (JSON). Alerts are throttled and sent in the background.

Email controls

Turn off WordPress system emails you do not need – comment notifications, new user emails, password / email change notifications, automatic update emails.

Tools

• Test email with the complete SMTP conversation (passwords hidden) and plain-language advice for common errors
• Connection check – connect and log in without sending an email
• Domain check – MX, SPF, DKIM and DMARC records with advice
• Import from WP Mail SMTP including the password
• wp-config.php constants – ideal for agencies managing many sites, passwords never stored in the database
• WP-CLI : wp ofsm test , wp ofsm queue , wp ofsm log , wp ofsm stats , wp ofsm resend , wp ofsm report

Security

• Passwords are encrypted (libsodium) with a key derived from your wp-config.php salts – never stored next to the encrypted value
• Passwords are hidden in the SMTP conversation
• Capability checks and nonces on every action, all output escaped
• Email previews are rendered in a sandboxed iframe
• Stored attachments are protected from direct access and downloaded only by administrators
• CSV export is protected against formula injection

Privacy

The email log stores recipients and (optionally) the content of emails in your own database. Open and click tracking processes personal data – mention it in your privacy policy or keep it turned off. No data is sent to Onlinefotka or any third party; alerts are sent only to the channels you configure.

External services

The plugin connects to third-party services only when you configure them:

• Google Gmail API and Google OAuth (accounts.google.com, oauth2.googleapis.com, gmail.googleapis.com) – used when a connection of the type “Google” is set up: to authorize your mailbox and to send each email (recipients, subject, content and attachments are sent to Google). Terms , Privacy
• Microsoft identity platform and Microsoft Graph (login.microsoftonline.com, graph.microsoft.com) – used for connections of the type “Microsoft 365 / Outlook” to authorize the mailbox and send each email. Terms , Privacy
• Zoho Accounts and Zoho Mail API (accounts.zoho.*, mail.zoho.*) – used for connections of the type “Zoho Mail” to authorize the mailbox and send each email (attachments are uploaded to Zoho). Terms , Privacy
• Your SMTP server – for SMTP connections the emails are delivered to the SMTP server you enter.
• Slack, Discord, Telegram or your own webhook URL – only if you enter them as alert channels: when an email fails, the site name, subject, recipient and error message are sent there. Slack: Terms , Privacy ; Discord: Terms , Privacy ; Telegram: Terms , Privacy

The domain check in Tools only performs DNS lookups of the domain you enter. No data is ever sent to Onlinefotka.