Fix contact honeypot so browser autofill does not swallow submissions.

Rename the trap field away from "website" and keep legacy detection so real messages still reach Telegram.

Co-authored-by: Cursor <cursoragent@cursor.com>

api/README.md

@@ -104,6 +104,6 @@ Backup is written even if Telegram fails (`telegram_ok: false`), so you still ha
 
 ## Behaviour notes
 
-- Honeypot field `website`: if filled, returns `200` without notifying Telegram or writing a backup.
+- Honeypot field `hp_company` (legacy `website` still checked): if filled, returns `200` without notifying Telegram or writing a backup.
 - In-memory rate limit: 5 POSTs per IP per 60 seconds → `429`.
 - Field limits: name/contact ≤ 200 chars, message ≤ 4000.

api/contact_server.py

@@ -114,8 +114,10 @@ def validate_fields(data: dict) -> tuple[str, str, str] | str:
         return "invalid"
 
     # Honeypot — treat as success upstream; caller checks separately.
-    website = data.get("website", "")
+    # Accept legacy "website" (autofill magnets) and current "hp_company".
-    if isinstance(website, str) and website.strip():
+    for pot in ("hp_company", "website"):
+        raw_pot = data.get(pot, "")
+        if isinstance(raw_pot, str) and raw_pot.strip():
             return "honeypot"
 
     def field(key: str, max_len: int) -> str | None:

en/index.html

@@ -429,8 +429,8 @@
 
     <form id="contactForm" data-status-loading="..." data-status-success="Sent ✓" data-status-error="Could not send. Please try again.">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

en/terminal/index.html

@@ -278,8 +278,8 @@
 
     <form id="contactForm" data-status-loading="..." data-status-success="Sent ✓" data-status-error="Could not send. Please try again.">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

index.html

@@ -429,8 +429,8 @@
 
     <form id="contactForm" data-status-loading="..." data-status-success="Отправлено ✓" data-status-error="Не удалось отправить. Попробуйте ещё раз.">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

src/index.html

@@ -334,8 +334,8 @@
 
     <form id="contactForm" data-status-loading="{{FORM_STATUS_LOADING}}" data-status-success="{{FORM_STATUS_SUCCESS}}" data-status-error="{{FORM_STATUS_ERROR}}">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

src/terminal.html

@@ -183,8 +183,8 @@
 
     <form id="contactForm" data-status-loading="{{FORM_STATUS_LOADING}}" data-status-success="{{FORM_STATUS_SUCCESS}}" data-status-error="{{FORM_STATUS_ERROR}}">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

styles.css

@@ -441,8 +441,18 @@ a:hover{opacity:0.7;}
 }
 #contactForm label{display:block; margin-bottom:20px; font-size:13px; color:var(--text);}
 #contactForm .hp-field{
-  position:absolute; left:-10000px; top:auto; width:1px; height:1px;
+  position:absolute !important;
-  overflow:hidden; opacity:0; pointer-events:none;
+  left:-10000px !important;
+  top:auto !important;
+  width:1px !important;
+  height:1px !important;
+  margin:0 !important;
+  padding:0 !important;
+  overflow:hidden !important;
+  clip:rect(0,0,0,0) !important;
+  border:0 !important;
+  opacity:0 !important;
+  pointer-events:none !important;
 }
 #contactForm input, #contactForm textarea{
   width:100%; margin-top:6px; padding:10px; border:1px solid var(--border);

terminal/index.html

@@ -278,8 +278,8 @@
 
     <form id="contactForm" data-status-loading="..." data-status-success="Отправлено ✓" data-status-error="Не удалось отправить. Попробуйте ещё раз.">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

ua/index.html

@@ -429,8 +429,8 @@
 
     <form id="contactForm" data-status-loading="..." data-status-success="Надіслано ✓" data-status-error="Не вдалося надіслати. Спробуйте ще раз.">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>

ua/terminal/index.html

@@ -278,8 +278,8 @@
 
     <form id="contactForm" data-status-loading="..." data-status-success="Надіслано ✓" data-status-error="Не вдалося надіслати. Спробуйте ще раз.">
       <label class="hp-field" aria-hidden="true">
-        <span>Website</span>
+        <span>Company fax</span>
-        <input type="text" name="website" tabindex="-1" autocomplete="off">
+        <input type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
       </label>
 
       <label>