While validating data is important I found it far easier to simply dump comments from people contacting me into a table… then created a password protected page where I just use the mail function to send a reply. Validating is better but I didn’t really see the point when I get maybe a handful of messages via my website a month.