✏ EDIT: contact.php

<?php
require_once __DIR__ . '/../app/Core/Session.php';
require_once __DIR__ . '/../app/Core/Security.php';
require_once __DIR__ . '/../app/Core/Database.php';
require_once __DIR__ . '/../app/Core/Validator.php';
Session::start();
if ($_SERVER['REQUEST_METHOD'] !== 'POST') Security::json(['status'=>'error','message'=>'Invalid request.'],405);
if (!Security::validateCsrf($_POST['csrf'] ?? null)) Security::json(['status'=>'error','message'=>'Security token expired. Refresh and try again.'],419);
$errors = Validator::required($_POST, ['name','phone']);
if (!Validator::email($_POST['email'] ?? '')) $errors['email'] = 'Invalid email address.';
if (!Validator::phone($_POST['phone'] ?? '')) $errors['phone'] = 'Invalid phone number.';
if ($errors) Security::json(['status'=>'error','message'=>implode(' ', $errors)],422);
$pdo = Database::tryConnection();
if (!$pdo) Security::json(['status'=>'error','message'=>'Database is not connected. Please configure config/database.php.'],500);
$stmt = $pdo->prepare('INSERT INTO enquiries(name, phone, email, country, service, message, status, created_at) VALUES(?,?,?,?,?,?,"New",NOW())');
$stmt->execute([
    Security::sanitize($_POST['name'] ?? ''),
    Security::sanitize($_POST['phone'] ?? ''),
    Security::sanitize($_POST['email'] ?? ''),
    Security::sanitize($_POST['country'] ?? ''),
    Security::sanitize($_POST['service'] ?? ''),
    Security::sanitize($_POST['message'] ?? '')
]);
Security::json(['status'=>'success','message'=>'Thank you. Your enquiry has been submitted successfully.']);

[✗] CANCEL