Best method for Contact Us form.

Question

Contact Us form can be implemented in two ways:-

1.  Save the form detail in database and admin can check it when he logs in.
2. Get the Message directly into admin's Mail.

I want to ask, which one should be efficient for small business and what are the security measures should be taken to prevent the website(built in MVC) from malicious users.