Direct form submission
The browser requests a token and submits the brief to the backend. The visitor sees sending, success and failure states.
BUSINESS SYSTEM / ENQUIRY AUTOMATION
A small workflow with a clear business purpose.
A visitor submits a project brief. The system validates it, notifies Michael and sends the visitor a confirmation with a reference. No email application needs to open.

01 / THE BUSINESS PROBLEM
The earlier contact experience prepared a message and asked visitors to finish sending through another application. That extra handoff made submission dependent on the visitor’s device and email setup.
The requirement was direct submission, a notification to the business and a clear acknowledgement for the person making the enquiry.
02 / BUSINESS ANALYSIS
03 / SYSTEM ARCHITECTURE
HTML, CSS and JavaScript collect the brief and consent.
A same-origin WordPress REST endpoint validates the request.
Server-side PHP passes the approved messages to WordPress mail.
A business notification and a visitor acknowledgement share a reference.
04 / WHAT I BUILT
The browser requests a token and submits the brief to the backend. The visitor sees sending, success and failure states.
Michael receives the project details. The visitor receives a confirmation email with a reference for the conversation.
The business contact page and Friends & Family landing page use the same server-side submission service, with different frontend layouts.
05 / VALIDATION & PROTECTION
The implementation uses a signed, expiring submission token tied to a secure cookie, input validation, request-size limits, a honeypot and rate limits. It also checks the request origin and requires consent.
These controls reduce common forms of misuse. They do not replace monitoring, ongoing updates or an independent security assessment.
06 / VERIFIED RESULT
The live form returned a successful response and reference.
Both the business notification and visitor acknowledgement reached the test mailbox.
The landing page uses the same working enquiry service.
A labelled test was submitted on 22 October 2026. It used the business’s own mailbox so the notification and acknowledgement could both be checked. Delivery to every external email provider has not been established by that test.
These results describe functional checks. Conversion rate and response-time measurement need a baseline and real usage data. Opening the live form does not send a message; submitting it does.
07 / NEXT DEVELOPMENT STAGE
A later scope could add a persistent enquiry record, an authenticated admin view, a follow-up queue, delivery monitoring and consent-aware CRM integration. These are proposed extensions, not features of the current system.
The next measurement would compare submission completion and time to first reply against a recorded baseline.
YOUR BUSINESS, NEXT
Show me what happens today. We can work out which part technology should improve.