How to Set Up SureForms with WP Rocket

Use this guide to configure WP Rocket while keeping SureForms submissions, field validation, and payments working.

Before you begin

Update SureForms and your optimization plugin. Save your current settings and test changes on a staging site when possible. Avoid running the same JavaScript optimization in multiple plugins.

With SureForms 2.6.0 or later, form pages generally do not need a page-cache exclusion. SureForms uses a time-based security token instead of a WordPress nonce. Do not treat the token’s validity as an unlimited cache lifetime. For older versions, update or exclude pages containing forms.

1. Keep dynamic requests out of page caching

Open Settings → WP Rocket → Advanced Rules. Add these entries to Never Cache URL(s), one per line, then save:

/wp-json/sureforms/
/wp-json/sureforms/(.*)
/wp-json/sureforms-pro/
/wp-json/sureforms-pro/(.*)
/wp-admin/admin-ajax.php

/wp-json/sureforms/
/wp-json/sureforms/(.*)
/wp-json/sureforms-pro/
/wp-json/sureforms-pro/(.*)
/wp-admin/admin-ajax.php

The base paths and their (.*) rules cover the namespaces and their child routes. Do not add /(.*) by itself: that would exclude your whole website.

The SureForms namespace covers submissions and Stripe webhooks. The Pro namespace covers Pro features and PayPal webhooks. admin-ajax.php handles requests such as payment intent creation. Omit the Pro rule if Pro is not installed.

Reference: WP Rocket URL exclusions

2. Exclude SureForms JavaScript

Open File Optimization → JavaScript Files. Under Minify JavaScript files, add the following to Excluded JavaScript Files, one per line. Keep existing exclusions and save.

/wp-content/plugins/sureforms/(.*).js
/wp-content/plugins/sureforms-pro/(.*).js
https://js.stripe.com/v3/
https://www.paypal.com/sdk/js

/wp-content/plugins/sureforms/(.*).js
/wp-content/plugins/sureforms-pro/(.*).js
https://js.stripe.com/v3/
https://www.paypal.com/sdk/js

The local patterns cover the plugin folders. If scripts use rewritten URLs, copy the original file URLs from the browser’s Network panel instead. Exclude the actual PayPal SDK URL if it includes query parameters.

Reference: WP Rocket minification exclusions

SureForms scripts to identify

Core: formSubmit.js and frontend.min.js. Payments: stripe-payment.js and payment-manager.js. These are normally under the sureforms plugin folder.

Pro, when active: pageBreak.js, datePicker.js, conditional-logic.min.js, file-upload.js, signature.js, signature_pad.umd.min.js, repeater.js, and the Save & Resume bundle. Find their actual URLs under the sureforms-pro folder or the browser’s Network panel; filenames can change.

3. Check script loading options

If Load JavaScript deferred or Delay JavaScript execution is enabled, add the following keywords to each feature’s separate Excluded JavaScript Files field. Saving a minification exclusion does not replace these exclusions.

plugins/sureforms/
plugins/sureforms-pro/
js.stripe.com
paypal.com/sdk/js

plugins/sureforms/
plugins/sureforms-pro/
js.stripe.com
paypal.com/sdk/js

Reference: WP Rocket delay exclusions

A plugin folder exclusion does not necessarily exclude inline initialization code or WordPress dependencies. If the console reports a missing variable, ask support to identify the related script and its dependency rather than excluding all JavaScript.

4. Keep payment scripts external

For payment forms, ensure Stripe.js loads directly from Stripe and the PayPal SDK loads directly from PayPal. Do not combine them into local bundles, block them, or replace them with locally cached copies.

https://js.stripe.com/v3/
https://www.paypal.com/sdk/js

https://js.stripe.com/v3/
https://www.paypal.com/sdk/js

Use the actual SDK URL loaded by your form when an exact URL is required. PayPal URLs can include query parameters. These external scripts do not belong in your site’s page-cache URL exclusion list.

5. Clear the cache and test

Save changes, then use WP Rocket’s Clear Cache action. If a host or CDN also caches the site, purge its page cache too.

Open the form in a private or incognito window. Test once, reload, then test again so the checks include cached pages. Repeat on desktop and mobile.

Submit a test entry. Confirm the success message or redirect and the saved entry under SureForms → Entries.

Check required fields, multi-step navigation, conditional logic, uploads, and other active Pro features.

For payments, use test or sandbox mode. Confirm fields load, payment completes, and the status updates. Check Save & Resume if enabled.

Troubleshooting

Temporarily disable Minify JavaScript files, Load JavaScript deferred, and Delay JavaScript execution. Clear the cache and retest, then re-enable one setting at a time.

If submissions still fail, inspect the /wp-json/sureforms/ request in Developer Tools → Network. Check the status and JSON response. HTML can indicate caching, a redirect, or a security block; it does not prove a cache problem.