<?php
ini_set('session.cookie_httponly', '1');
ini_set('session.cookie_samesite', 'Strict');
$secure = !empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off';
session_set_cookie_params(['httponly'=>true,'secure'=>$secure,'samesite'=>'Strict']);
session_start();

$token = $_SESSION['csrf_token'] ?? bin2hex(random_bytes(32));
$_SESSION['csrf_token'] = $token;

$errors = [];
$success = false;
$posted = $_SERVER['REQUEST_METHOD'] === 'POST';
if($posted){
  $validToken = isset($_POST['csrf_token']) && hash_equals($_SESSION['csrf_token'] ?? '', $_POST['csrf_token']);
  if(!$validToken){
    $errors[] = 'Security verification failed.';
  }
  $name = trim($_POST['name'] ?? '');
  $email = filter_var(trim($_POST['email'] ?? ''), FILTER_SANITIZE_EMAIL);
  $phone = trim($_POST['phone'] ?? '');
  $message = trim($_POST['message'] ?? '');
  if($name === '' || mb_strlen($name) > 100){ $errors[] = 'Please enter your name.'; }
  if(!filter_var($email, FILTER_VALIDATE_EMAIL)){ $errors[] = 'Please enter a valid email.'; }
  if($message === '' || mb_strlen($message) > 2000){ $errors[] = 'Please enter your message.'; }
  if(empty($errors)){
    $safeName = htmlspecialchars($name, ENT_QUOTES, 'UTF-8');
    $safeEmail = htmlspecialchars($email, ENT_QUOTES, 'UTF-8');
    $safePhone = htmlspecialchars($phone, ENT_QUOTES, 'UTF-8');
    $safeMsg = htmlspecialchars($message, ENT_QUOTES, 'UTF-8');
    $log = "Name: $safeName\nEmail: $safeEmail\nPhone: $safePhone\nMessage: $safeMsg\n----\n";
    file_put_contents(__DIR__ . '/contact-messages.txt', $log, FILE_APPEND | LOCK_EX);
    $adminEmail = 'contact@smarthealthguide.net';
    $subject = 'New Contact Form Submission';
    $body = "You received a new message from the contact form:\n\nName: $safeName\nEmail: $safeEmail\nPhone: $safePhone\nMessage:\n$message\n";
    $headers = 'From: noreply@smarthealthguide.net' . "\r\n" . 'Reply-To: ' . $safeEmail . "\r\n";
    @mail($adminEmail, $subject, $body, $headers);
    $confirmSubject = 'Thanks for contacting us!';
    $confirmBody = "Hello $safeName,\n\nThank you for reaching out. We have received your message. Our team will get back to you soon.\n\nBest regards,\nSmart Health Guide";
    @mail($safeEmail, $confirmSubject, $confirmBody, $headers);
    $success = true;
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
    $token = $_SESSION['csrf_token'];
  }
}
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Contact Us | Smart Health Guide</title>
<meta name="description" content="Contact Smart Health Guide for appointments, telehealth, and program information.">
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
<link rel="stylesheet" href="assets/css/styles.css">
<link rel="canonical" href="https://smarthealthguide.net/contact.php">
<meta property="og:title" content="Contact Us | Smart Health Guide">
<meta property="og:description" content="Contact Smart Health Guide for appointments, telehealth, and program information.">
<meta property="og:type" content="website">
<meta property="og:url" content="https://smarthealthguide.net/contact.php">
<meta property="og:image" content="https://images.unsplash.com/photo-1522335789203-aabd1fc54bc9?q=80&w=1200&auto=format&fit=crop">
<script type="application/ld+json">{"@context":"https://schema.org","@type":"WebPage","name":"Contact Us - Smart Health Guide","description":"Contact Smart Health Guide for appointments, telehealth, and program information.","url":"https://smarthealthguide.net/contact.php"}</script>
</head>
<body>
<a href="#main" class="skip-link">Skip to content</a>
<nav class="navbar navbar-expand-lg bg-white sticky-top py-3"><div class="container"><a class="navbar-brand d-flex align-items-center" href="/">Smart Health Guide</a><button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#nav" aria-controls="nav" aria-expanded="false" aria-label="Toggle navigation"><span class="navbar-toggler-icon"></span></button><div class="collapse navbar-collapse" id="nav"><ul class="navbar-nav ms-auto mb-2 mb-lg-0"><li class="nav-item"><a class="nav-link" href="index.html">Home</a></li><li class="nav-item dropdown"><a class="nav-link dropdown-toggle" href="#" data-bs-toggle="dropdown">Services</a><ul class="dropdown-menu"><li><a class="dropdown-item" href="services-preventive-care.html">Preventive Care</a></li><li><a class="dropdown-item" href="services-primary-care.html">Primary Care</a></li><li><a class="dropdown-item" href="services-chronic-disease.html">Chronic Disease</a></li><li><a class="dropdown-item" href="services-women-child.html">Women & Child Health</a></li><li><a class="dropdown-item" href="services-telehealth.html">Telehealth</a></li><li><a class="dropdown-item" href="services-pharmacy-wellness.html">Pharmacy & Wellness</a></li></ul></li><li class="nav-item"><a class="nav-link" href="about.html">About</a></li><li class="nav-item"><a class="nav-link" href="contact.php">Contact</a></li></ul><a href="subscribe.php" class="btn btn-vhf ms-lg-3">Find a Plan</a></div></div></nav>
<main class="section"><div class="container">
  <div class="row g-4">
    <div class="col-lg-6">
      <h1>Contact Us</h1>
      <p class="lead">We’re here to help with appointments, telehealth, and programs.</p>
      <p class="mb-1"><strong>Address:</strong> 452 Edgewood St, Inglewood, California(CA), 90302</p>
      <p class="mb-1"><strong>Phone:</strong> (716) 895-0117</p>
      <p class="mb-4"><strong>Email:</strong> hello@smarthealthguide.net</p>
      <img class="img-fluid rounded-3 shadow" alt="Clinic front desk" src="https://images.unsplash.com/photo-1580281780460-82d277b0e3e5?q=80&w=1400&auto=format&fit=crop">
    </div>
    <div class="col-lg-6">
      <div class="card vhf p-4">
        <h5 class="fw-bold mb-3">Send us a message</h5>
        <?php if($success): ?>
          <div class="alert alert-success" role="alert">Thank you. Your message has been sent.</div>
        <?php endif; ?>
        <?php if(!$success): ?>
        <?php if(!empty($errors)): ?>
          <div class="alert alert-danger" role="alert"><?php echo implode(' ', array_map(fn($e)=>htmlspecialchars($e,ENT_QUOTES,'UTF-8'), $errors)); ?></div>
        <?php endif; ?>
        <form id="contactForm" method="POST" action="contact.php">
          <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($token, ENT_QUOTES, 'UTF-8'); ?>">
          <div class="mb-3">
            <label for="name" class="form-label">Name</label>
            <input id="name" name="name" type="text" class="form-control" required>
          </div>
          <div class="mb-3">
            <label for="email" class="form-label">Email</label>
            <input id="email" name="email" type="email" class="form-control" required>
          </div>
          <div class="mb-3">
            <label for="phone" class="form-label">Phone</label>
            <input id="phone" name="phone" type="tel" class="form-control" placeholder="Optional">
          </div>
          <div class="mb-3">
            <label for="message" class="form-label">Message</label>
            <textarea id="message" name="message" rows="4" class="form-control" required></textarea>
          </div>
          <button class="btn btn-vhf" type="submit">Submit</button>
        </form>
        <?php endif; ?>
      </div>
    </div>
  </div>
</div></main>
<footer class="footer pt-5 pb-4"><div class="container small d-flex flex-wrap gap-3 justify-content-between"><span>© <span id="y"></span> Smart Health Guide</span><span><a href="privacy.html">Privacy</a> · <a href="terms.html">Terms</a></span></div></footer>
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script><script src="assets/js/main.js"></script><script>document.getElementById('y').textContent=new Date().getFullYear()</script></body></html>
