Docs & License API

This is a WordPress plugin β€” it does not run on its own. Set up a WordPress site first, then install the plugin. Don’t have WordPress yet? Download and install it from wordpress.org.

1. Install the plugin

  1. Upload the superinquiry folder to wp-content/plugins/ (or upload the zip in wp-admin).
  2. Activate β€” a sample form and the β€œSales” role are created automatically.
  3. Add the shortcode [superinquiry_form id="1"] to any page.
  4. (Pro) Enter your key under Super Inquiry β†’ License to unlock Pro.

Requirements: WordPress 5.8+, PHP 7.4+, MySQL 5.7+.

2. License API (called by the plugin)

All endpoints are POST and return JSON. Fields: license_key, site_url.

curl -X POST "https://superinquiry.com/api/verify" \
  -d "license_key=SI-XXXX-XXXX-XXXX-XXXX" \
  -d "site_url=https://client-site.com"
{"success":true,"valid":true,"status":"active",
 "expires_at":"2027-07-10 00:00:00","max_activations":3,
 "activations_used":1,"message":"License is valid."}

status: active / not_activated / expired / disabled / not_found / limit_reached / bad_request

Sites are counted by normalised hostname (lower-cased, www. stripped), so re-activating the same site never consumes a second slot.

verify answers per SITE, not per key: a host holding no seat gets not_activated (a seat is free β€” activate it) or limit_reached (all seats taken), never active. A request without site_url is refused.

3. Pro: Login security (optional)

Once enabled in Super Inquiry β†’ Pro Settings, wp-login.php and a logged-out /wp-admin return 404, and the login form responds only at an address you choose (default /adm/). It ships alongside a same-IP failed-login lockout and blocks username enumeration via ?author=N and the REST users endpoint. admin-ajax.php, admin-post.php and wp-cron.php stay reachable, so front-end forms and scheduled tasks keep working.

Locked yourself out? Restore the default login page in wp-config.php:
define( 'SUPERINQUIRY_DISABLE_LOGIN_RENAME', true );
Β© Super Inquiry. All rights reserved.