How to create a PHP contact form

Contact forms allow visitors to reach you without exposing your email address to spam bots. A PHP contact form processes submissions on your server and sends messages directly to your inbox.

You will create a basic PHP contact form, configure the mail headers correctly for our hosting environment and add spam protection. Once complete, visitors can submit enquiries through your website.

Create the contact form

You need two files: an HTML form that visitors see and a PHP script that processes submissions. The HTML file collects information whilst the PHP file validates input and sends the email.

1. Create your form HTML.
   Build a basic contact form with fields for name, email address and message. The form’s action attribute should point to your PHP processing script and the method should be set to POST.
2. Write the PHP processing script.
   Create a PHP file that retrieves form data using $_POST, validates the input and constructs an email message. This PHP contact form tutorial provides a complete working example you can adapt.
3. Upload both files to your hosting account.
   Use FTP or your hosting control panel’s file manager to upload the HTML and PHP files to your website’s public directory. Make sure the PHP file has a .php extension.

Your basic contact form structure is now in place. Next, you need to configure the mail headers correctly for our hosting environment.

Configure mail headers

Our hosting platform requires a valid sender address in the mail function. Without this configuration, your form submissions will fail to send.

1. Locate the mail function in your PHP script.
   Find the line that calls PHP’s mail() function. It typically looks like mail($to,$subject,$message,$headers);
2. Add the sender address parameter.
   Modify the mail function to include a -f parameter with a valid email address configured on your domain. The updated line should read: mail($to,$subject,$message,$headers,'-f your@email.here'); replacing your@email.here with an actual email address from your domain.
3. Save and upload the modified file.
   Save your changes and upload the updated PHP file to your hosting account, replacing the previous version.

Your contact form now sends emails correctly through our mail servers. The sender address you specified must exist on your domain for the form to work.

Prevent spam attacks

Unsecured contact forms are a common target for spam bots. Attackers exploit vulnerable forms to send thousands of spam emails, which can lead to your hosting account being suspended for excessive mail usage.

Add Google reCAPTCHA to your contact form. This verification system blocks automated submissions whilst allowing legitimate visitors to contact you. Our spam detection systems monitor outgoing mail across all hosting accounts, and forms that generate spam traffic risk suspension.

Wrapping up

Your PHP contact form is now configured and protected. You created the form structure, configured mail headers for our hosting environment and added spam protection. Visitors can now submit enquiries through your website.

Test your form by submitting a message and checking that it arrives in your inbox. If you use WordPress, consider our WordPress contact form guide for plugin-based alternatives that include built-in spam protection.

If you run into any trouble, get in touch and our team will be happy to help.