'Arshan Mahi', 'tagline' => 'Youth sector & tech consultancy grounded in lived experience.', 'subline' => 'I help youth organisations and tech-led projects build systems, strategy, and support that actually work — with paid work subsidising free community support.', 'email' => 'hello@yourdomain.co.uk', 'location' => 'London, UK', 'linkedin_url' => 'https://www.linkedin.com/in/your-profile', 'calendly_url' => '', // optional e.g. https://calendly.com/... 'site_url' => '', // optional e.g. https://arshanmahi.co.uk ]; $enable_contact_form = false; // set true to enable sending via mail() $contact_to_email = $site['email']; // recipient $contact_subject_prefix = '[Website enquiry] '; $honeypot_field = 'website'; // bots fill this, humans won’t // Basic security headers header('X-Frame-Options: DENY'); header('X-Content-Type-Options: nosniff'); header('Referrer-Policy: no-referrer-when-downgrade'); header('Permissions-Policy: geolocation=(), microphone=(), camera=()'); // CSRF helpers session_start(); if (empty($_SESSION['csrf'])) { $_SESSION['csrf'] = bin2hex(random_bytes(16)); } $csrf = $_SESSION['csrf']; function h(string $s): string { return htmlspecialchars($s, ENT_QUOTES, 'UTF-8'); } // Contact form handling $form = [ 'sent' => false, 'error' => '', 'name' => '', 'email' => '', 'message' => '' ]; if ($_SERVER['REQUEST_METHOD'] === 'POST') { $posted_csrf = $_POST['csrf'] ?? ''; $hp = trim((string)($_POST[$honeypot_field] ?? '')); $form['name'] = trim((string)($_POST['name'] ?? '')); $form['email'] = trim((string)($_POST['email'] ?? '')); $form['message'] = trim((string)($_POST['message'] ?? '')); if (!hash_equals($csrf, (string)$posted_csrf)) { $form['error'] = 'Something went wrong. Please refresh and try again.'; } elseif ($hp !== '') { $form['error'] = 'Spam detected.'; } elseif ($form['name'] === '' || $form['email'] === '' || $form['message'] === '') { $form['error'] = 'Please complete all fields.'; } elseif (!filter_var($form['email'], FILTER_VALIDATE_EMAIL)) { $form['error'] = 'Please enter a valid email address.'; } else { if ($enable_contact_form) { $subject = $contact_subject_prefix . $site['name']; $body = "New enquiry from {$site['name']} website:\n\n" . "Name: {$form['name']}\n" . "Email: {$form['email']}\n\n" . "Message:\n{$form['message']}\n"; $headers = "From: {$site['name']} <{$contact_to_email}>\r\n" . "Reply-To: {$form['name']} <{$form['email']}>\r\n" . "Content-Type: text/plain; charset=UTF-8\r\n"; $ok = @mail($contact_to_email, $subject, $body, $headers); if ($ok) { $form['sent'] = true; $form['name'] = $form['email'] = $form['message'] = ''; } else { $form['error'] = 'Message could not be sent (mail not configured on this server). Please email directly.'; } } else { // Form disabled: show success but prompt to email $form['sent'] = true; } } } $year = (int)date('Y'); ?>
Practical, outcomes-focused support across the youth sector and tech.
Rates are discussed after an initial conversation to ensure the right fit and scope.
Email: = h($site['email']) ?>