SMTech Turf Booking Manager

Description

SMTech Turf Booking Manager provides a self-contained turf and sports-court booking workflow. It includes an administrator dashboard, booking management, configurable time-based rates, frontend booking forms, blackout dates, reports and customizable email notifications.

The plugin stores booking data in the site’s WordPress database and does not require a third-party SaaS account. Optional SMTP and externally hosted email-logo URLs are configured by the site administrator.

Features

• Frontend booking form with the [smtbm_booking] shortcode.
• Admin booking creation and booking management.
• Multiple locations, sports and lighting options.
• Time-based rate schedules by sport, location and day group.
• Rates calculated across multiple time bands when a booking crosses a rate boundary.
• Optional matrix-style rate configuration.
• Closed dates and closed date ranges.
• Configurable booking form fields.
• Frontend colour controls.
• Admin and customer email templates.
• Optional SMTP delivery configuration.
• Reports and analytics based on stored turf booking records.
• WordPress privacy-policy guidance and personal-data export/erasure support.

Shortcode

Use [smtbm_booking] on the public booking page.

For an administrator booking form, the plugin also supports [smtbm_booking admin_mode="1"] in an appropriate admin-only context.

Rate Management

The time-based configuration can contain multiple ranges for the same sport and location. For example:

• Monday-Friday, 06:00-12:00: 500/hour
• Monday-Friday, 12:00-16:00: 700/hour
• Monday-Friday, 16:00-23:00: 1000/hour

A booking spanning multiple ranges is calculated using the configured rate for each part of the booking.

Privacy

Booking information can include customer name, mobile number, email address, booking date/time, sport, location, lighting, amount, status and additional form data configured by the site administrator. This information is stored in the site’s WordPress database.

The plugin does not send booking data to an external analytics service by default. Optional SMTP configuration may transmit email through the configured mail provider. Email logos can be loaded from a URL selected by the administrator.

WordPress privacy tools can export or erase booking records matched by customer email address. Site owners are responsible for their privacy notice, lawful basis, retention policy and applicable laws.

Security

Administrative operations use WordPress capability checks and nonces. User input is validated/sanitized and output is escaped. Database queries use WordPress database APIs and prepared statements where variable values are used. Frontend image uploads use the WordPress upload API with an explicit image MIME allowlist.

To report a security issue, contact the plugin maintainer privately rather than posting exploit details publicly.

Technical details