
Description
Tired of spam from your contact form? This PHP script stops bots without bothering real visitors — no annoying captcha.
How it stops spam
- Hidden trap field (honeypot): people don't see it, bots fill it in
- Minimum completion time: bots submit instantly
- CSRF token: the form can't be posted from another site
- Per-IP hourly message limit
- Blocked words and link limit, from the config file
- Email header injection protection
Bots are shown "Message sent" so they don't retry, but you receive nothing from them.
Install in 2 minutes
Put your email address in config.php, upload the folder to your hosting and you're done. Works on any hosting with PHP 8.
Looks good everywhere
Clean, responsive design with clear error and confirmation messages. Change the colours in form.css.
What you get
- contact.php — the form and all the logic
- config.php — settings (email, limits, blocked words)
- form.css — the form styling
- data/ — protected folder for the per-IP limit
- CITESTE-MA.txt — instructions (Romanian)

