How to Restrict a Form Endpoint to Your Own Domain
Your form's action URL is sitting in plain view in your page source. Here's how to stop anyone else from posting to it.
The SimpleForm Blog
Notes from the team on static-site forms, JAMstack patterns, and form security.
429 Rate Limit Error: Why Your Form Submission Failed
A 429 response on your SimpleForm endpoint means the IP-based rate limiter kicked in, not that you have hit your plan's monthly quota. Here is how the two differ and what to do about it.
Fixing a CORS Error on Your Fetch API Form Submission
A fetch() call to your form backend fails silently with a CORS error while the plain HTML version worked fine. Here is the exact mechanism and the fix.
What Happens When You Exceed Your Form Submission Limit
Hitting a form submission limit does not crash your site, but it does silently drop submissions. Here is exactly what SimpleForm does when a plan's cap is reached.
Send Form Webhook Notifications to Slack Automatically
SimpleForm can push every form submission into Slack the instant it arrives — but only if you know the one payload-shape gotcha that keeps most direct setups silent.
Why Static Site Contact Form Emails End Up in Spam
Contact form emails from static sites often disappear into spam because the sending domain never authenticates. Here is the actual mechanism, and the fix.
How to Add reCAPTCHA v3 to a Static Form Without a Server
reCAPTCHA v3 scores every form submission from 0 to 1 with no checkbox to click. Here's how to wire it into a static site form and understand what happens to that score.
Prevent Contact Form Reload With the Fetch API
A plain HTML form reloads the page on submit because the browser treats it as a top-level navigation. Intercept the submit event with fetch and you keep the page, the state, and the user.
Accepting File Uploads on a Static Site Contact Form
A static host can't catch a file upload on its own. Here are the three real ways to add one, and the exact HTML SimpleForm needs to receive files directly.
Webhooks, Retention, and GDPR: What Happens After Someone Hits Submit
The form is the easy part. What happens to the submission afterwards — where it is forwarded, how long it is kept, who can read it — is where both the outages and the legal exposure live.
How Do You Add a Working Contact Form to an Astro or Hugo Site?
Static site generators removed the server, which also removed the thing that used to handle POST. Here is the complete path from a plain HTML form to submissions arriving reliably.
Honeypot vs. reCAPTCHA: Which Spam Defence Belongs on a Static-Site Form?
Honeypots cost nothing and catch most bots. reCAPTCHA catches more and costs your visitors something real. Here is how to decide which layers your form actually needs.
Have a topic you'd like us to cover? Tell us.