Forms

VoxelSite generates working forms as part of your website — contact forms, booking forms, inquiry forms, order forms. They work out of the box with no external services.

How forms are generated

When you tell VoxelSite about your business, it creates forms appropriate for your needs. A restaurant gets a reservation form. A photographer gets a booking inquiry form. A consultant gets a contact form.

Each form has two parts:

1. HTML — The visible form on your page, with proper validation attributes
2. Schema — A JSON file in assets/forms/ that defines the fields, validation rules, and submission handling

The form handler (submit.php) reads the schema to validate and process submissions.

Features

Validation

Server-side validation for required fields, email format, phone format, and custom rules defined in the form schema. Client-side validation via HTML5 attributes for instant feedback.

Spam protection

Every form includes honeypot fields — invisible fields that humans don't fill out but bots do. Submissions with honeypot fields filled are silently rejected. No CAPTCHA, no external service.

Email notifications

When someone submits a form, VoxelSite can send an email notification. Configure email settings in Settings → Email with your SMTP credentials.

VoxelSite supports:

• SMTP — Gmail, Outlook, Yahoo, iCloud, Zoho, custom server
• PHP mail() — Uses your server's built-in mail function
• No email — submissions are still stored, you just check them in the Studio

Submission storage

All form submissions are stored in a SQLite database at _data/submissions.db. This directory is protected by .htaccess — submissions are never publicly accessible.

Submission management

View and manage all form submissions in VoxelSite Studio under the Forms tab:

• View all submissions per form
• Filter by status: New, Read, Replied, Archived
• Search submissions
• Export to CSV
• Add notes to submissions
• Delete submissions

Form types

The AI generates forms based on what your business needs. Common types:

• Contact form — name, email, message
• Booking form — name, email, date, time, service selection
• Order form — item selection, quantities, contact info
• Inquiry form — detailed multi-field forms for specific services
• Newsletter signup — email collection

Technical details

Forms submit via standard POST to submit.php. JavaScript enhancement provides AJAX submission with loading states and success messages, while the form still works without JavaScript.

The JavaScript enhancement lives in assets/js/form-handler.js. VoxelSite automatically deploys and updates this file from its source copy — if you update VoxelSite, any bug fixes to the form handler are applied automatically on the next publish.

Uploaded files from form submissions are stored in _data/uploads/ and are protected from public access.

Server compatibility

VoxelSite's form handler uses __DIR__-based path resolution for maximum compatibility across different server environments (Apache, Nginx, Herd, Valet, shared hosting). The form handler, MCP server, and Studio API all resolve paths relative to their own file locations rather than relying on DOCUMENT_ROOT.