Are there any best practices for integrating a price request functionality in PHP for e-commerce websites?

When integrating a price request functionality in PHP for e-commerce websites, it is important to ensure that the request form is secure and user-friendly. One best practice is to validate user input to prevent any malicious code injection. Additionally, it is recommended to send the price request to the appropriate department or email for further processing.

<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Validate user input
    $name = test_input($_POST["name"]);
    $email = test_input($_POST["email"]);
    $product = test_input($_POST["product"]);
    
    // Send price request email
    $to = "sales@example.com";
    $subject = "Price Request for $product";
    $message = "Name: $name\n";
    $message .= "Email: $email\n";
    $message .= "Product: $product\n";
    
    // Send email
    mail($to, $subject, $message);
    
    // Display success message
    echo "Price request sent successfully!";
}

function test_input($data) {
    $data = trim($data);
    $data = stripslashes($data);
    $data = htmlspecialchars($data);
    return $data;
}

?>