<?php
if (session_status() !== PHP_SESSION_ACTIVE) { session_set_cookie_params(['httponly'=>true,'secure'=>!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off','samesite'=>'Lax']); session_start(); }
$choices = ['Sunset Riddle','Midnight Orbit','Porchlight Prism','Rosewater Window','Little Blue Hour','Marigold Maze','Not sure yet'];
if (empty($_SESSION['csrf'])) { $_SESSION['csrf'] = bin2hex(random_bytes(32)); $_SESSION['form_started'] = time(); }
$errors = $errors ?? [];
function old($key) { return htmlspecialchars((string)($_POST[$key] ?? ''), ENT_QUOTES, 'UTF-8'); }
?>
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Contact &amp; Order Requests | Morrow &amp; Marble</title><meta name="description" content="Contact Morrow &amp; Marble in Minneapolis or send a handmade candy order inquiry."><link rel="canonical" href="https://vexnaro.buzz/contact.php"><link rel="icon" href="assets/favicon.svg" type="image/svg+xml"><link rel="stylesheet" href="assets/style.css"><script src="assets/main.js" defer></script></head><body><header class="header"><div class="wrap head"><a class="brand" href="index.html" aria-label="Morrow and Marble home"><span class="brandmark">✳</span><span>MORROW <i>&</i> MARBLE<small>HANDMADE CONFECTIONS</small></span></a><button class="menu" type="button" aria-expanded="false" aria-controls="nav">Menu <span>☰</span></button><nav id="nav" aria-label="Main navigation"><a  href="index.html">Home</a><a  href="candies.html">Our Candies</a><a  href="story.html">Our Story</a><a  href="process.html">Handmade Process</a><a  href="journal.html">Journal</a><a  href="faq.html">FAQ</a><a aria-current=page href="contact.php">Contact</a><a class="nav-cta" href="contact.php#request">Request an order <span>↗</span></a></nav></div></header><main><section class="page-intro wrap"><div class="eyebrow">SAY HELLO</div><h1>Let’s make something<br><em>sweet happen.</em></h1><p>Have a question or an order in mind? Tell us a little about it and we’ll take it from there.</p></section><section class="wrap contact-grid"><div class="contact-info"><div class="eyebrow">REACH OUT</div><h2>We’d love to hear<br>from you.</h2><p>For order inquiries, include your preferred candy, quantity, and any important dates. We’ll discuss availability and details with you before an order is confirmed.</p><div class="contact-detail"><b>EMAIL</b><a href="mailto:info@vexnaro.buzz">info@vexnaro.buzz</a></div><div class="contact-detail"><b>PHONE</b><a href="tel:+16128716147">+1 (612) 871-6147</a></div><div class="contact-detail"><b>ADDRESS</b><p>2645 Humboldt Ave S<br>Minneapolis, MN 55408, USA</p></div><p class="small">Please contact us before visiting to confirm availability.</p></div><div class="form-box" id="request"><div class="eyebrow">ORDER INQUIRY</div><h2>Tell us what you’re thinking.</h2><p>No payment is collected here. All fields marked * are required.</p><?php if (!empty($errors)): ?><div class="errors" role="alert"><strong>Your request was not sent.</strong><ul><?php foreach ($errors as $error): ?><li><?= htmlspecialchars($error, ENT_QUOTES, 'UTF-8') ?></li><?php endforeach; ?></ul></div><?php endif; ?><form action="thank-you.php" method="post"><input type="hidden" name="csrf" value="<?= htmlspecialchars($_SESSION['csrf'], ENT_QUOTES, 'UTF-8') ?>"><div class="trap" aria-hidden="true"><label>Leave this field empty<input name="website" tabindex="-1" autocomplete="off"></label></div><div class="fields"><label>Name *<input name="name" required maxlength="100" autocomplete="name" value="<?= old('name') ?>"></label><label>Email *<input name="email" type="email" required maxlength="254" autocomplete="email" value="<?= old('email') ?>"></label><label>Phone <span>(optional)</span><input name="phone" type="tel" maxlength="40" autocomplete="tel" value="<?= old('phone') ?>"></label><label>Candy Selection *<select name="candy" required><option value="">Choose a candy</option><?php foreach ($choices as $choice): ?><option value="<?= htmlspecialchars($choice, ENT_QUOTES, 'UTF-8') ?>" <?= (($_POST['candy'] ?? '') === $choice) ? 'selected' : '' ?>><?= htmlspecialchars($choice, ENT_QUOTES, 'UTF-8') ?></option><?php endforeach; ?></select></label><label>Quantity *<input name="quantity" type="number" min="1" max="10000" required value="<?= old('quantity') ?>"></label><label class="full">Message *<textarea name="message" rows="5" maxlength="3000" required><?= old('message') ?></textarea></label></div><p class="small">By submitting, you agree that we may use your details to respond to your inquiry. See our <a href="privacy.html">Privacy Policy</a>.</p><button class="button" type="submit">Send my request <span>↗</span></button></form></div></section></main><footer><div class="wrap footer-grid"><div><a class="foot-brand" href="index.html">MORROW <i>&</i> MARBLE</a><p>A little wonder, made by hand.<br>Small-batch candy with an unexpected twist.</p></div><div><h3>EXPLORE</h3><a href="candies.html">Our candies</a><a href="story.html">Our story</a><a href="process.html">Our process</a><a href="journal.html">The journal</a></div><div><h3>GET IN TOUCH</h3><p>2645 Humboldt Ave S<br>Minneapolis, MN 55408</p><a href="tel:+16128716147">+1 (612) 871-6147</a><a href="mailto:info@vexnaro.buzz">info@vexnaro.buzz</a></div></div><div class="wrap foot-bottom"><span>© Morrow & Marble</span><span><a href="privacy.html">Privacy Policy</a> &nbsp; / &nbsp; <a href="terms.html">Terms & Conditions</a></span></div></footer></body></html>