session_start(); // === ONLY CLEAR SESSION ON FRESH FORM LOAD === if (basename($_SERVER['SCRIPT_NAME']) === 'index.php' && $_SERVER['REQUEST_METHOD'] !== 'POST') { unset($_SESSION['quote_data']); unset($_SESSION['errors']); } // ENFORCE HTTPS if (!isset($_SERVER['HTTPS']) || $_SERVER['HTTPS'] !== 'on') { header('Location: https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']); exit; } // === WHITELIST & RATE LIMITING === $your_ip = $_SERVER['REMOTE_ADDR']; $whitelist = ['192.168.1.100']; $ip = $_SERVER['REMOTE_ADDR']; if (!in_array($ip, $whitelist)) { $rate_key = 'form_submissions_' . md5($ip); if (!isset($_SESSION[$rate_key])) { $_SESSION[$rate_key] = ['count' => 0, 'first' => time()]; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { $_SESSION[$rate_key]['count']++; $count = $_SESSION[$rate_key]['count']; $first = $_SESSION[$rate_key]['first']; $now = time(); if ($count >= 20 && ($now - $first < 3600)) { die('Too many submissions. Please wait 1 hour.'); } if ($now - $first >= 3600) { $_SESSION[$rate_key] = ['count' => 1, 'first' => $now]; } } } // === CLOSE SESSION ONLY AFTER ALL $_SESSION WRITES === date_default_timezone_set('America/New_York'); $today = date("Y-m-d"); $time = date("G:i:s a"); $revision_date = 'May 11, 2025'; $keywords = 'moving, long distance, interstate, moving truck, pods, truck rental, self moving, dity moving'; $page_title = 'Free Quote - MoveAmerica'; ?>