📄 contact_submit.php

<?php
require_once __DIR__ . '/includes/functions.php';

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    redirect('contact.php');
}

if (!empty($_POST['hp_field'])) {
    redirect('contact.php?sent=1');
}

if (!csrf_verify()) {
    redirect('contact.php?sent=error');
}

$name = trim($_POST['name'] ?? '');
$phone = trim($_POST['phone'] ?? '');
$email = trim($_POST['email'] ?? '');
$message = trim($_POST['message'] ?? '');

if ($name === '' || $message === '') {
    redirect('contact.php?sent=error');
}

$stmt = db()->prepare('INSERT INTO contact_messages (name, phone, email, message) VALUES (?, ?, ?, ?)');
$stmt->execute([$name, $phone, $email, $message]);

redirect('contact.php?sent=1');