0, 'path' => '/', 'domain' => '', 'secure' => !empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off', 'httponly' => true, 'samesite' => 'Lax' ]); session_start(); if (!isset($_SESSION['csrf_token'])) { $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); } $errors = []; $success = null; $values = [ 'firstName' => '', 'lastName' => '', 'email' => '', 'phone' => '', 'service' => '', 'budget' => '', 'timeline' => '', 'message' => '', 'newsletter' => '' ]; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (!isset($_POST['csrf_token']) || !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) { $errors[] = 'Invalid submission token.'; } else { $values['firstName'] = trim((string)($_POST['firstName'] ?? '')); $values['lastName'] = trim((string)($_POST['lastName'] ?? '')); $values['email'] = filter_var(trim((string)($_POST['email'] ?? '')), FILTER_SANITIZE_EMAIL); $values['phone'] = trim((string)($_POST['phone'] ?? '')); $values['service'] = trim((string)($_POST['service'] ?? '')); $values['budget'] = trim((string)($_POST['budget'] ?? '')); $values['timeline'] = trim((string)($_POST['timeline'] ?? '')); $values['message'] = trim((string)($_POST['message'] ?? '')); $newsletterChecked = isset($_POST['newsletter']) ? 'Yes' : 'No'; $terms = isset($_POST['terms']); if ($values['firstName'] === '') $errors[] = 'First name is required.'; if ($values['lastName'] === '') $errors[] = 'Last name is required.'; if ($values['email'] === '' || !filter_var($values['email'], FILTER_VALIDATE_EMAIL)) $errors[] = 'Valid email is required.'; if ($values['message'] === '') $errors[] = 'Project details are required.'; if (!$terms) $errors[] = 'You must agree to Terms & Privacy Policy.'; if (!$errors) { try { $dbDir = __DIR__ . '/../data'; if (!is_dir($dbDir)) { @mkdir($dbDir, 0775, true); } $dbPath = $dbDir . '/site.db'; $pdo = new PDO('sqlite:' . $dbPath); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $pdo->exec('CREATE TABLE IF NOT EXISTS contacts (id INTEGER PRIMARY KEY AUTOINCREMENT, first_name TEXT, last_name TEXT, email TEXT, phone TEXT, service TEXT, budget TEXT, timeline TEXT, message TEXT, newsletter TEXT, ip TEXT, ua TEXT, created_at TEXT)'); $stmt = $pdo->prepare('INSERT INTO contacts (first_name,last_name,email,phone,service,budget,timeline,message,newsletter,ip,ua,created_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,datetime("now"))'); $stmt->execute([ $values['firstName'], $values['lastName'], $values['email'], $values['phone'], $values['service'], $values['budget'], $values['timeline'], $values['message'], $newsletterChecked, $_SERVER['REMOTE_ADDR'] ?? '', $_SERVER['HTTP_USER_AGENT'] ?? '' ]); } catch (Throwable $t) { $logFile = ($dbDir ?? (__DIR__ . '/../data')) . '/errors.log'; @file_put_contents($logFile, '[' . date('c') . '] DB error: ' . $t->getMessage() . "\n", FILE_APPEND); } $success = 'Thank you, ' . htmlspecialchars($values['firstName']) . '! Your project inquiry has been sent.'; $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); $values = [ 'firstName' => '', 'lastName' => '', 'email' => '', 'phone' => '', 'service' => '', 'budget' => '', 'timeline' => '', 'message' => '', 'newsletter' => '' ]; } } } ?> Contact Us - Home Enhancement Services

Contact HOME RENOVATE GUIDE

Tell us about your project and we will get back within 24 hours.

    '; foreach ($errors as $e) { echo '
  • ' . htmlspecialchars($e) . '
    • '; } echo '
'; } ?> ' . $success . '
'; } ?>
Contact our home enhancement team
>