Homepage Modes.
How the VoxelBooking public homepage works. Simple mode vs. applications mode. Enabling business access requests.
Two Modes
VoxelBooking's public homepage (/) operates in two modes, controlled by a single toggle in Settings → General → "Accept business applications".
Simple Mode (Default)
The default for all installations. Displays:
- The animated VoxelBooking logo
- Your application name (configurable in Settings → General)
- A login link for administrators
No form is rendered. No session cookie is set for public visitors.
Applications Mode
When Accept business applications is enabled, the homepage becomes a full landing page with:
- A headline and feature overview on the left
- A Request Access form on the right
The form collects: business name, contact name, email, phone (optional), website (optional), and a message (optional). Submissions are stored with pending status for operator review.
Anti-Spam Protection
The request form is protected by a multi-layer anti-bot pipeline:
- Time record validation - The form records the time it was loaded. Submissions under 3 seconds or over 1 hour are rejected.
- Honeypot field - A hidden field that bots typically fill in. Human visitors never see it.
- CSRF token - Standard cross-site request forgery protection.
- Rate limiting - Per-IP throttling prevents abuse.
No CAPTCHAs are used. No external services are contacted.
Duplicate Prevention
If a pending request already exists for the same email address, the form will reject the submission with an error message. This prevents accidental duplicate applications.
Ready to build?
One-time purchase. Self-hosted. Own every file forever.