A small, working PHP script: a single-file contact form with CSRF token, honeypot field, rate limiting per session, input validation and mail() delivery. Includes a README with install steps and security notes, and was linted and smoke-tested on PHP 8.3.