CONTACT FORM SCRIPT  v1.0
=========================
A secure, dependency-free PHP contact form: spam protection, SMTP support, auto-reply,
message inbox and CSV export. No database required. PHP 7.4+ (8.x recommended).

QUICK START (5 minutes)
-----------------------
1. Upload this folder to your hosting (e.g. public_html/contact/).
2. Open config.php and set at least:
      to_email, site_name, from_email, from_name
3. Open  https://yourdomain.com/contact/contact-form.php  — send a test message.
4. Make sure the storage/ folder is writable (chmod 755, or 775 if needed).

SENDING EMAIL
-------------
'mailer' => 'mail'   uses PHP mail() — fine on most hosting, but may land in spam.
'mailer' => 'smtp'   uses any SMTP server (recommended). Fill the 'smtp' block:

   Gmail      smtp.gmail.com            587  tls   (use an App Password)
   Zoho       smtp.zoho.in / .com       465  ssl
   Hostinger  smtp.hostinger.com        465  ssl
   Brevo      smtp-relay.brevo.com      587  tls
   SendGrid   smtp.sendgrid.net         587  tls   (username: apikey)

   Use a from_email that your provider allows (usually the same mailbox / verified domain).
   Errors are written to storage/errors.log.

EMBED ON YOUR SITE
------------------
Option A - link to contact-form.php.
Option B - iframe:  <iframe src="/contact/contact-form.php" style="width:100%;height:720px;border:0"></iframe>
See embed-example.html.

ADMIN INBOX
-----------
Open /contact/admin.php   Default password: ChangeMe123  (CHANGE IT!)
Create a new hash:   php -r "echo password_hash('your-password', PASSWORD_DEFAULT);"
and paste it into config.php -> admin_password_hash.
No SSH? Use any online bcrypt generator (cost 10, $2y$ prefix).

SECURITY BUILT IN
-----------------
CSRF token • honeypot field • minimum fill time • per-IP hourly limit • blocked words •
email-header-injection protection • output escaping • storage/ and lib/ blocked via .htaccess
(on Nginx add: location ~ ^/contact/(storage|lib)/ { deny all; })

CUSTOMISE
---------
Colours, topics, thank-you text, auto-reply text and limits are all in config.php.

SUPPORT: ping@dakshb.co.in  •  https://dakshb.co.in
