Version 3 end of life
This version of Silverstripe CMS will not recieve any additional bug fixes or documentation updates. Go to documentation for the most recent stable version.

How to make a simple contact form

In this how-to, we'll explain how to set up a specific page type holding a contact form, which submits a message via email. Let's start by defining a new ContactPage page type:

	<?php
	class ContactPage extends Page {
	}
	class ContactPage_Controller extends Page_Controller {
		private static $allowed_actions = array('Form');
		public function Form() { 
			$fields = new FieldList( 
				new TextField('Name'), 
				new EmailField('Email'), 
				new TextareaField('Message')
			); 
			$actions = new FieldList( 
				new FormAction('submit', 'Submit') 
			); 
			return new Form($this, 'Form', $fields, $actions); 
		}
	}

There's quite a bit in this function, so we'll step through one piece at a time.

	$fields = new FieldList(
		new TextField('Name'),
		new EmailField('Email'),
		new TextareaField('Message')
	);
	$actions = FieldList(
		new FormAction('submit', 'Submit')
	);
	return new Form($this, 'Form', $fields, $actions);

To show the form on the page, we need to render it in our template. We do this by appending $ to the name of the form – so for the form we just created we need to add $Form. Add $Form to the themes/currenttheme/Layout/Page.ss template, below $Content.

The reason it's standard practice to name the form function 'Form' is so that we don't have to create a separate template for each page with a form. By adding $Form to the generic Page.ss template, all pages with a form named 'Form' will have their forms shown.

If you now create a ContactPage in the CMS (making sure you have rebuilt the database and flushed the templates /dev/build?flush=all) and visit the page, you will now see a contact form.

howto contactForm

Now that we have a contact form, we need some way of collecting the data submitted. We do this by creating a function on the controller with the same name as the form action. In this case, we create the function 'submit' on the ContactPage_Controller class.

	class ContactPage_Controller extends Page_Controller {
		private static $allowed_actions = array('Form');
		public function Form() {
			// ...
		}
		public function submit($data, $form) { 
			$email = new Email(); 
			 
			$email->setTo('siteowner@mysite.com'); 
			$email->setFrom($data['Email']); 
			$email->setSubject("Contact Message from {$data["Name"]}"); 
			 
			$messageBody = " 
				<p><strong>Name:</strong> {$data['Name']}</p> 
				<p><strong>Message:</strong> {$data['Message']}</p> 
			"; 
			$email->setBody($messageBody); 
			$email->send(); 
			return array(
				'Content' => '<p>Thank you for your feedback.</p>',
				'Form' => ''
			);
		}
	}

Caution: This form is prone to abuse by spammers, since it doesn't enforce a rate limitation, or checks for bots. We recommend to use a validation service like the "recaptcha" module for better security. [/hint]

Any function that receives a form submission takes two arguments: the data passed to the form as an indexed array, and the form itself. In order to extract the data, you can either use functions on the form object to get the fields and query their values, or just use the raw data in the array. In the example above, we used the array, as it's the easiest way to get data without requiring the form fields to perform any special transformations.

This data is used to create an email, which you then send to the address you choose.

The final thing we do is return a 'thank you for your feedback' message to the user. To do this we override some of the methods called in the template by returning an array. We return the HTML content we want rendered instead of the usual CMS-entered content, and we return false for Form, as we don't want the form to render.

##How to add form validation

All forms have some basic validation built in – email fields will only let the user enter email addresses, number fields will only accept numbers, and so on. Sometimes you need more complicated validation, so you can define your own validation by extending the Validator class.

The framework comes with a predefined validator called RequiredFields, which performs the common task of making sure particular fields are filled out. Below is the code to add validation to a contact form:

	public function Form() { 
		// ...
		$validator = new RequiredFields('Name', 'Message');
		return new Form($this, 'Form', $fields, $actions, $validator); 
	}