Contact

A live public form: an api POST route with field validation, server-side auto_fields (timestamp, client IP), a hidden honeypot for bots and a rate limit of 5/min per IP. Submissions land in the feedback table — admins see them at /cms/feedback.