Next step · What to do next

Add a contact form that really reaches me (safely)

What you may see

I want customers to send me messages from the website

Why this step

A form must be checked by the server, protected from spam, and tested end to end; a form that looks fine but does not arrive costs customers.

Before you start

Where should messages go: one email address or a database list I read?
Do you have an email sending service, or will you use one?

The prompt for this step

What you type here never leaves your browser. The search runs on this page, and nothing is sent to a server or to an AI.

Any error or warning you see now

What you have now (tool, framework, where it is hosted)

Kept only in this browser, on this device. Keys and passwords are removed before anything is saved.

Prompt language

You are a senior engineer and careful product advisor who builds small business websites and apps, and explains every step to people who are not developers. I am not a developer, so explain every step in plain words and tell me exactly which button, menu or command you mean. If you are not sure about something, say so; do not guess.

WHAT I WANT NEXT
Add a contact form that really reaches me (safely)

ANY ERROR OR WARNING I SEE NOW (write "none" if there is none)
[paste the exact error here]

WHAT I HAVE NOW (the tool I used, the framework, where it is hosted)
[write in a few words what you did before it happened]

WHY THIS STEP
A form must be checked by the server, protected from spam, and tested end to end; a form that looks fine but does not arrive costs customers.

DO THESE STEPS, IN THIS ORDER
1. Design the form with me: fields (name, email or phone, message), labels in English and Arabic, right-to-left layout, big touch targets, and clear errors.
2. Send the data to a server route that validates every field, limits length, and refuses bad input; never trust the page.
3. Add spam protection in layers (hidden trap field, minimum time, limit per address, optional challenge) and answer bots and humans alike.
4. Save the message first, then email it; show success only after the server confirms, and keep the recipient in one setting.
5. Give me a test list (empty form, long text, Arabic text, double click, phone).
Stop and tell me if what you see does not match a step. Do not skip ahead.

CHECK THAT IT WORKED
- A test message arrives in the inbox with Arabic text intact, and double clicking sends once.
Tell me exactly what I should see on the screen when it works.

DO NOT CHANGE
- Do not put the email service key in browser code.
- Anything I did not ask about: the design, the text, other pages, other settings or the data.
- Do not delete files, data or branches, do not reset or force-push, and do not rewrite history, unless you first show me exactly what would be lost and I say yes.
- Do not paste, print or ask me to paste a password or secret key into this chat. If one is needed, tell me which settings page of the right service to store it in.

WHEN YOU FINISH
Explain in simple words what you changed (file by file or setting by setting), why you changed it, and how I can undo it.

Paste it into Claude, ChatGPT, Gemini or Cursor, then follow what it says.

After you tried it, did it work?

Steps

Design the form with me: fields (name, email or phone, message), labels in English and Arabic, right-to-left layout, big touch targets, and clear errors.
Send the data to a server route that validates every field, limits length, and refuses bad input; never trust the page.
Add spam protection in layers (hidden trap field, minimum time, limit per address, optional challenge) and answer bots and humans alike.
Save the message first, then email it; show success only after the server confirms, and keep the recipient in one setting.
Give me a test list (empty form, long text, Arabic text, double click, phone).

Do not do this

Do not show "sent" before the server confirms.
Do not put the email service key in browser code.

Try another entry