From 2bb102971ce560e5e72fc5dca53916f94570efa7 Mon Sep 17 00:00:00 2001
From: "Danilo M." <danix@danix.xyz>
Date: Wed, 22 Apr 2026 14:35:00 +0200
Subject: fix: capture form load time for timing check

---
 assets/js/contact-form.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/assets/js/contact-form.js b/assets/js/contact-form.js
index ce81c8c..a5eebba 100644
--- a/assets/js/contact-form.js
+++ b/assets/js/contact-form.js
@@ -8,6 +8,7 @@ document.addEventListener('alpine:init', () => {
     isSubmitting: false,
     statusMessage: '',
     statusClass: '',
+    loadedAt: Math.floor(Date.now() / 1000),
 
     async submitContactForm() {
       this.isSubmitting = true;
@@ -21,7 +22,7 @@ document.addEventListener('alpine:init', () => {
         formData.append('message', this.formData.message);
         formData.append('subject', '');
         formData.append('website', ''); // honeypot
-        formData.append('_t', Math.floor(Date.now() / 1000)); // timing check
+        formData.append('_t', this.loadedAt); // timing check: when form loaded
 
         const response = await fetch('/api/contact.php', {
           method: 'POST',
-- 
cgit v1.2.3