site wide contact form

Answer 1

I am guessing that you are trying to protect your form from spammer, however HTTP_REFERER is set by the users browser and can be faked. The forum should be protected from spam by a fixed to address so they can only send spam to you. If you still want to do it you can use a preg_replace to remove http and www and then check if it has your root domain in it.

Answer 2

Thank you for your reply! I should have included entire code as it would show that the form also sends out a auto response to person filling out the form so not sure if fixed to address would work? although I am not exactly sure how to write and implement preg_replace into the current script I will give it a whirl and read the link you have sent. Sorry I am just learning.