Introducing Gjallarform
Gjallarform
We are releasing Gjallarform — a lightweight contact form engine designed for static and low-maintenance websites like Publii. Many site owners forget that EU websites must provide a working, reliable way for visitors to get in touch — and that external form services often raise GDPR concerns.
Link to the Project page on this site.
Gjallarform keeps everything on your own server: no third-party processors, no tracking, no external scripts, no CMS, no API keys. Just PHP and sendmail.
Spam protection is layered: a honeypot field catches automated bots silently, a time trap rejects suspiciously fast submissions, and an arithmetic challenge handles the human operators who get past the first two. Each layer is independent — turn on what you need.
It has been running on conram.it and rikardmalmborg.se long enough to have survived a real-world spam attack. That is what prompted the math challenge feature.
Version 0.95 public beta. Four files, one folder, one config block. PHP 8.1+, nothing else required.