From 5c8c406082c39273f98294a7cb3ff52099bcb5c9 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sun, 1 Mar 2026 03:14:02 +0000
Subject: [PATCH] Update contact subject dropdown to match actual services;
 update README

Contact form subject options now match the five service lines on the site:
New Project Inquiry, Mesh Networking, Managed Services, Structured
Cabling, Access Control, IP Camera Systems, Technical Support, Other.
Removed the old ISP-generic options (billing, coverage, new-service).
Updated $subject_labels in admin-inbox.php to match.

README updates:
- ADMIN_PASS added to web container env vars table and env vars section
- Project structure updated to include db.php and admin-inbox.php
- Milestone 1 contact form item updated to note MySQL storage
- Milestone 4 marks contact DB storage and staff inbox as complete;
  email notification remains as the next open item

https://claude.ai/code/session_015wpwmheufcxkBuXivrSHhd
---
 README.md                 | 15 ++++++++++-----
 www/pages/admin-inbox.php | 13 ++++++++-----
 www/pages/contact.php     |  9 ++++++---
 3 files changed, 24 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index acce182..5924b35 100644
--- a/README.md
+++ b/README.md
@@ -127,6 +127,7 @@ docker build -t alwisp_web:latest .
 | `DB_NAME` | `alwisp` |
 | `DB_USER` | `alwisp_user` |
 | `DB_PASS` | *(same password set in Step 3)* |
+| `ADMIN_PASS` | *(password for the staff inbox at `/staff-portal`)* |
 
 4. Add **Path/Volume Mappings**:
 
@@ -216,6 +217,7 @@ Because the web container has a dedicated LAN IP, reverse proxy setup is straigh
 | `DB_NAME` | Database name (default: `alwisp`) |
 | `DB_USER` | Application DB user (default: `alwisp_user`) |
 | `DB_PASS` | Application DB password — make this strong |
+| `ADMIN_PASS` | Password for the staff inbox (`/staff-portal`) — change before going live |
 
 ---
 
@@ -243,13 +245,15 @@ alwisp/
     ├── assets/                 # Logos, images
     ├── includes/
     │   ├── header.php          # Global nav
-    │   └── footer.php          # Global footer
+    │   ├── footer.php          # Global footer
+    │   └── db.php              # PDO helper (auto-migrates schema)
     └── pages/
         ├── home.php
         ├── services.php
         ├── coverage.php
         ├── about.php
-        ├── contact.php
+        ├── contact.php         # Stores submissions in MySQL
+        ├── admin-inbox.php     # Staff inbox at /staff-portal (password-gated)
         └── 404.php
 ```
 
@@ -262,7 +266,7 @@ alwisp/
 - [x] Front-controller PHP router
 - [x] Responsive site skeleton with brand design system
 - [x] Homepage: hero, stats bar, services preview, why section, coverage CTA
-- [x] Contact form with server-side validation
+- [x] Contact form with server-side validation and MySQL storage
 - [x] Stub pages for all top-level routes (services, coverage, about, contact, 404)
 - [x] Security headers, OPcache, and Apache hardening
 - [x] Unraid-ready deployment via Docker Compose
@@ -288,10 +292,11 @@ alwisp/
 ---
 
 ### Milestone 4 — Customer Portal (Phase 1)
+- [x] Contact form stores submissions in MySQL
+- [x] Staff inbox (`/staff-portal`) — password-gated, mark read/unread, no email required
+- [ ] Email notification on new submission (PHPMailer)
 - [ ] Customer account creation and login (PHP sessions)
 - [ ] Account dashboard — plan details, billing status, support tickets
-- [ ] Contact form wired to database and email notification (PHPMailer)
-- [ ] Admin panel — view and respond to contact submissions
 - [ ] Password reset via email token
 
 ---
diff --git a/www/pages/admin-inbox.php b/www/pages/admin-inbox.php
index e23455c..c4b8f76 100644
--- a/www/pages/admin-inbox.php
+++ b/www/pages/admin-inbox.php
@@ -101,11 +101,14 @@ $messages    = $db->query("SELECT * FROM contacts ORDER BY created_at DESC")->fe
 $unread_count = (int)$db->query("SELECT COUNT(*) FROM contacts WHERE is_read = 0")->fetchColumn();
 
 $subject_labels = [
-    'new-service' => 'New Service Inquiry',
-    'support'     => 'Technical Support',
-    'billing'     => 'Billing Question',
-    'coverage'    => 'Coverage Question',
-    'other'       => 'Other',
+    'new-project'       => 'New Project Inquiry',
+    'mesh-networking'   => 'Mesh Networking',
+    'managed-services'  => 'Managed Services',
+    'structured-cabling'=> 'Structured Cabling',
+    'access-control'    => 'Access Control',
+    'ip-cameras'        => 'IP Camera Systems',
+    'support'           => 'Technical Support',
+    'other'             => 'Other',
 ];
 
 function h(string $s): string { return htmlspecialchars($s, ENT_QUOTES); }
diff --git a/www/pages/contact.php b/www/pages/contact.php
index a864afb..edbd258 100644
--- a/www/pages/contact.php
+++ b/www/pages/contact.php
@@ -88,10 +88,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
                         <label for="subject" class="form__label">Subject</label>
                         <select id="subject" name="subject" class="form__input">
                             <option value="">Select a topic…</option>
-                            <option value="new-service">New Service Inquiry</option>
+                            <option value="new-project">New Project Inquiry</option>
+                            <option value="mesh-networking">Mesh Networking</option>
+                            <option value="managed-services">Managed Services</option>
+                            <option value="structured-cabling">Structured Cabling</option>
+                            <option value="access-control">Access Control</option>
+                            <option value="ip-cameras">IP Camera Systems</option>
                             <option value="support">Technical Support</option>
-                            <option value="billing">Billing Question</option>
-                            <option value="coverage">Coverage Question</option>
                             <option value="other">Other</option>
                         </select>
                     </div>