The whole category in one page.
THE MOST IMPORTANT THING
Test your forms monthly, from outside your network, to a major email provider.
Forms break silently. A form broken for three months is three months of lost enquiries.
THE MOST COMMON DELIVERY FAULT
Sending with the visitor's address as the sender.
Send from your own domain and put their address in reply-to.
STORE SUBMISSIONS IN THE SITE
Email is a notification, not the record.
A full mailbox silently rejects enquiries.
FIELD COUNT
Three for a contact form. Every extra field costs submissions.
For Nigerian customers, a phone number is frequently more useful than email.
LABELS
Above the field, always visible. Not placeholder text.
FOR SPAM
Honeypot and a time check first. Add CAPTCHA only if that fails.
Every CAPTCHA costs legitimate submissions.
FOR UPLOADS
Restrict file types, verify actual content, prevent execution, and do not store personal documents in public_html.
FOR DATA
Publish a privacy notice, collect only what you need, delete old submissions.
An enquiry is not consent to marketing.
