SWAMPy

✎ CARVE FLESH

EDITING: contact.php

<?php
// api/contact.php  (PUBLIC — no auth required)
// POST { name, email, phone, service, message } → { message }
//
// Called by the public-facing ContactForm on the site.
// Inserts a new inquiry row and optionally sends a notification email.

declare(strict_types=1);

require_once __DIR__ . '/admin/cors.php';
require_once __DIR__ . '/admin/db.php';
require_once __DIR__ . '/admin/auth_middleware.php'; // for abort() / json_out() helpers

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    abort(405, 'Method not allowed');
}

$data    = body();
$name    = trim((string)($data['name']    ?? ''));
$email   = trim((string)($data['email']   ?? ''));
$phone   = trim((string)($data['phone']   ?? ''));
$service = trim((string)($data['service'] ?? ''));
$message = trim((string)($data['message'] ?? ''));

// ── Validate ──────────────────────────────────────────────────────────────────

$errors = [];
if (strlen($name)    < 2)   $errors[] = 'Name must be at least 2 characters';
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) $errors[] = 'Invalid email address';
if (strlen($phone)   < 7)   $errors[] = 'Phone number is too short';
if ($service === '')         $errors[] = 'Please select a service';
if (strlen($message) < 5)   $errors[] = 'Message is too short';

if (!empty($errors)) {
    http_response_code(422);
    echo json_encode(['message' => $errors[0], 'errors' => $errors]);
    exit;
}

// ── Insert ────────────────────────────────────────────────────────────────────

$id = bin2hex(random_bytes(16));

db()->prepare('
    INSERT INTO inquiries (id, name, email, phone, service, message, status)
    VALUES (?, ?, ?, ?, ?, ?, \'New\')
')->execute([$id, $name, $email, $phone, $service, $message]);

// ── Optional: email notification ─────────────────────────────────────────────

try {
    // Only send if the setting is enabled
    $notifyRow = db()->prepare("SELECT setting_value FROM settings WHERE setting_key = 'notify_new_inquiry' LIMIT 1");
    $notifyRow->execute();
    $notify = (string)($notifyRow->fetchColumn() ?: '0');

if ($notify === '1') {
        $toRow = db()->prepare("SELECT setting_value FROM settings WHERE setting_key = 'support_email' LIMIT 1");
        $toRow->execute();
        $to = filter_var((string)($toRow->fetchColumn() ?: ''), FILTER_VALIDATE_EMAIL);

if ($to) {
            $subject = "New Inquiry from {$name} — VGC Property";
            $body    = "You have received a new inquiry.\n\n"
                     . "Name:    {$name}\n"
                     . "Email:   {$email}\n"
                     . "Phone:   {$phone}\n"
                     . "Service: {$service}\n\n"
                     . "Message:\n{$message}\n\n"
                     . "Log in to the admin dashboard to respond.";

mail($to, $subject, $body, "From: noreply@vgcproperty.com\r\nContent-Type: text/plain; charset=UTF-8");
        }
    }
} catch (\Throwable) {
    // Email failure must never break the form submission
}

json_out(['message' => 'Thank you. A consultant will reach out within 24 hours.'], 201);

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 admin/	DIR	—	2026-10-23 13:41
📁 public/	DIR	—	2020-01-24 02:16
📄 .htaccess	HTACCESS	180 B	2026-10-23 13:34	EDIT
📄 contact.php	PHP	3.4 KB	2026-05-16 15:10	EDIT
📄 error_log	?	11.3 KB	2026-08-16 17:12	EDIT
📄 inquiries.php	PHP	3.8 KB	2026-05-16 20:25	EDIT
📄 properties.php	PHP	1.8 KB	2026-05-16 18:48	EDIT
📄 property-inquiries.php	PHP	3.9 KB	2026-06-30 13:55	EDIT