How to Build a Fast & Secure PHP Contact Form with reCAPTCHA v3

Tanzi Bee — Sun, 16 Feb 2025 22:51:34 +0000

A fast-loading, secure contact form is essential for any website, but many tutorials overcomplicate the process.

In this guide, I’ll show you how to build a lightweight PHP contact form with Google reCAPTCHA v3 to prevent spam—without unnecessary bloat.

This form is simple, secure, and easy to customize. Plus, you can grab the full working code from my GitHub repository here.

Why Use a Custom PHP Form?

Many website builders and plugins offer form solutions, but they often come with downsides:

Slower page loads due to excessive scripts.
Higher security risks with unverified submissions.
Less customization compared to a lightweight hand-coded form.

A manually coded form ensures speed, security, and full control over its functionality. See in action here.

Setting Up the Contact Form

Creating the Form (index.html)

Start with a simple HTML form that submits user input to a PHP script.

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Contact Form</title>
</head>
<body>
    <h2>Contact Us</h2>
    <form method="POST" action="send_email.php">
        <label>Name:</label>
        <input type="text" name="name" required>

        <label>Email:</label>
        <input type="email" name="email" required>

        <label>Message:</label>
        <textarea name="message" required></textarea>

        <input type="hidden" name="g-recaptcha-response" id="recaptchaResponse">
        <button type="submit">Send</button>
    </form>

    <script src="https://www.google.com/recaptcha/api.js?render=your-recaptcha-site-key"></script>
    <script>
        grecaptcha.ready(function() {
            grecaptcha.execute('your-recaptcha-site-key', { action: 'submit' }).then(function(token) {
                document.getElementById('recaptchaResponse').value = token;
            });
        });
    </script>
</body>
</html>

Replace your-recaptcha-site-key with your actual Google reCAPTCHA v3 Site Key.

Processing the Form (send_email.php)

Create a PHP script that validates reCAPTCHA and sends the email.

<?php
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $recaptcha_secret = "your-recaptcha-secret-key";
    $recaptcha_response = $_POST['g-recaptcha-response'];

    $recaptcha_url = "https://www.google.com/recaptcha/api/siteverify";
    $recaptcha = file_get_contents($recaptcha_url . '?secret=' . $recaptcha_secret . '&response=' . $recaptcha_response);
    $recaptcha = json_decode($recaptcha, true);

    if (!$recaptcha['success'] || $recaptcha['score'] < 0.5) {
        echo "<script>alert('reCAPTCHA failed. Please try again.'); window.history.back();</script>";
        exit;
    }

    $to = "your-email@example.com";
    $subject = "New Contact Form Submission";
    $message = "Name: " . $_POST['name'] . "\nEmail: " . $_POST['email'] . "\nMessage: " . $_POST['message'];

    $headers = "From: noreply@yourwebsite.com\r\n";
    $headers .= "Reply-To: " . $_POST['email'] . "\r\n";

    if (mail($to, $subject, $message, $headers)) {
        echo "<script>alert('Message sent successfully!'); window.location.href = 'thank-you.html';</script>";
    } else {
        echo "<script>alert('Error sending message. Please try again.'); window.history.back();</script>";
    }
}
?>

Replace your-recaptcha-secret-key and your-email@example.com with your own values.

Why Use reCAPTCHA v3?

Unlike reCAPTCHA v2, which requires users to click a checkbox or solve puzzles, reCAPTCHA v3 runs invisibly in the background. It assigns a score based on user behavior, blocking bots while allowing real users to submit the form smoothly.

A custom PHP contact form is faster and more secure than many plugin-based alternatives. By implementing reCAPTCHA v3, you protect your site from spam while ensuring a smooth user experience.

Grab the full source code on GitHub: php-fast-contact-form

Let me know in the comments if you have any questions or suggestions!

Beating Google’s Prioritisation of Ads Over Organic Search

Tanzi Bee — Sun, 16 Feb 2025 14:51:32 +0000

Are Paid Ads Killing Organic Search? Here’s What You Need to Know!

Google’s increasing emphasis on paid ads over organic results is making it harder for businesses to get free visibility in search results. [As a web designer](https://webhoney.digital/website-design) and SEO expert, I’ve seen the impact firsthand. Here’s how you can still win organic traffic despite Google’s shifting priorities.

1. Maximise Local SEO

Google may prioritise ads, but it still values local intent. To increase organic visibility:

Optimise Google Business Profile (even though it doesn’t directly boost rankings, it helps with trust and conversions).
Ensure your NAP (Name, Address, Phone Number) is consistent across the web.
Target local keywords (e.g., “web design in Hobart” rather than just “web design”).
Encourage reviews—they improve click-through rates and engagement.

2. Improve Click-Through Rates (CTR) to Outperform Ads

Even if ads appear first, a compelling organic result can still attract clicks:

Use powerful meta titles & descriptions that create urgency or value.
Implement schema markup (e.g., reviews, FAQs) to make your results stand out.
Test longer, descriptive page titles that naturally answer search queries.

3. Publish Content That Google CAN’T Ignore

Google rewards unique, high-value content. Here’s what works:

Data-driven insights (e.g., case studies, original research).
Comprehensive guides that answer search intent better than competitors.
User-generated content, like FAQs from real clients, to boost engagement.
Consistent blogging—fresh content keeps Google coming back.

4. Build Authority With Strategic Backlinks

Google prioritises trusted sources, so boosting your site’s credibility is key:

Get backlinks from relevant industry sites like Dev.to, Medium, and reputable blogs.
Use guest posting to reach new audiences.
Engage in HARO (Help a Reporter Out) to be featured in media articles.

5. Speed Up & Optimise Your Website

Google heavily factors user experience into rankings. Improve yours by:

Using a fast-loading website (test with PageSpeed Insights or GTmetrix).
Ensuring a mobile-friendly, responsive design.
Reducing bounce rates with intuitive layouts and clear calls to action.

6. Use External Platforms to Get Found on Google

Google’s prioritisation of ads makes it essential to use third-party platforms that rank well in search results:

Gumtree Ads – Google often indexes Gumtree listings, so posting services there can help your visibility.
Facebook Reviews – Google now pulls Facebook reviews into business profiles, making them a valuable SEO asset.
LinkedIn Articles & Posts – Indexed by Google, great for professional credibility.
Reddit & Quora Answers – Can rank in Google search for niche topics.
YouTube Videos – Google prioritises video content; YouTube is a great SEO boost.
Industry Directories (e.g., Clutch, Trustpilot, Oneflare) – Many get indexed by Google and help build credibility.

7. Diversify Beyond Google Search

Google’s ad push means it’s time to explore other traffic sources:

YouTube SEO: Since Google owns YouTube, optimising video content is a smart move.
Reddit & Quora marketing: Answering relevant questions can drive organic clicks.
Social media & email marketing: Build a loyal audience outside of search.

While Google’s prioritisation of ads is frustrating, organic search isn’t dead, it just requires a smarter strategy. By focusing on local SEO, high-value content, technical optimisation, and alternative traffic sources, you can still dominate search results without paying for ads. I have clients who have never paid a cent for Google or Bing Ads, but maintain their spot on page one.

What strategies have worked for you? Let’s discuss in the comments!

DEV Community: Tanzi Bee