-
Mar 23rd, 2009, 06:25 AM
#1
Thread Starter
Frenzied Member
[PHP] Checking if a form has been submitted, the correct way...
Checking that a form has been submitted is one of the first things you will encounter when handling form inputs. For arguements sake, here is my example form:
Code:
<form action="script.php" method="post">
<input name="email" type="text" />
<input name="submit" type="submit" value="Submit">
</form>
What the form above will do is post the variables email and submit to the action, script.php.
At this stage most people tend to check to see if a form has been executed by verifying if the submit button variable has been delivered to the receiving script, using code similar to this:
PHP Code:
if(isset($_POST['submit']))
In most cases this will work, but there are a few occasions when it won't. To identify when this condition will fail we have to look at the different ways of submitting a form.
There are two ways of submitting a form, one is to click the submit button, the other is to hit return, of which will envoke the submit button. The problem occurs when you hit the return button (as most people do), when using Internet Explorer (the most commonly used browser) and when the submit button does not have focus. This will submit the form, but it will not send the submit variable, which would mean the script we are using above will fail.
Despite this flaw, there is an easy solution:
Code:
<input type='hidden' name='submit' />
Here we are setting a hidden variable within our form, so no matter how the form is submitted, the submit variable will always be posted, this means there is no requirement to modify how your PHP works.
I hope this helps,
ILMV
TODO:
- Create demonstration script
-
Mar 25th, 2009, 06:18 AM
#2
Re: [PHP] Checking if a form has been submitted, the correct way...
not to step on your toes, but I believe (and please, correct me if I'm wrong) that a better way of checking whether or not a form has been submitted is to check the request method.
PHP Code:
if($_SERVER['REQUEST_METHOD'] == "POST")
-
Mar 27th, 2009, 08:00 AM
#3
Thread Starter
Frenzied Member
Re: [PHP] Checking if a form has been submitted, the correct way...
Blast , never realised that one existed.
It still demonstrates that my initial method is the incorrect way of checking if a form has been submitted, changing it to the way you suggest would fix this problem.
Many thanks Kows!
-
Apr 24th, 2009, 07:44 AM
#4
Addicted Member
Re: [PHP] Checking if a form has been submitted, the correct way...
Thanks both of you for such a simple solution.
-
Aug 31st, 2011, 04:06 AM
#5
New Member
Re: [PHP] Checking if a form has been submitted, the correct way...
agree)) simple and quick solution..good job guys!! personally i've never done it on my own
-
Nov 20th, 2012, 10:05 PM
#6
New Member
Re: [PHP] Checking if a form has been submitted, the correct way...
Originally Posted by kows
not to step on your toes, but I believe (and please, correct me if I'm wrong) that a better way of checking whether or not a form has been submitted is to check the request method.
PHP Code:
if($_SERVER['REQUEST_METHOD'] == "POST")
This won't work if the form submitted uses the GET method. The best way, unfortunately, is to add what I_Love_My_Vans suggested, add a <input type='hidden' name='submit' /> to EVERY form page. Kind of sucks, but I don't think there's a better way yet
-
Nov 21st, 2012, 02:11 AM
#7
Re: [PHP] Checking if a form has been submitted, the correct way...
Originally Posted by charles254
This won't work if the form submitted uses the GET method. The best way, unfortunately, is to add what I_Love_My_Vans suggested, add a <input type='hidden' name='submit' /> to EVERY form page. Kind of sucks, but I don't think there's a better way yet
Well, using the Get method is the incorrect way of doing things and it is not very secure.
when you quote a post could you please do it via the "Reply With Quote" button or if it multiple post click the "''+" button then "Reply With Quote" button.
If this thread is finished with please mark it "Resolved" by selecting "Mark thread resolved" from the "Thread tools" drop-down menu.
https://get.cryptobrowser.site/30/4111672
-
Nov 21st, 2012, 01:21 PM
#8
New Member
Re: [PHP] Checking if a form has been submitted, the correct way...
Originally Posted by Nightwalker83
Well, using the Get method is the incorrect way of doing things and it is not very secure.
"incorrect way of doing things". Not to get into a philosophical battle but it really depends on what you're doing. If you're filling out a form to fetch a result set from a db, you would/should be using GET over POST and the if($_SERVER['REQUEST_METHOD'] == "POST") would not work for all ways a form can be submitted. The hidden field method would cover all cases.
-
Dec 29th, 2012, 12:33 PM
#9
New Member
Re: [PHP] Checking if a form has been submitted, the correct way...
I find that $_SERVER['REQUEST_METHOD'] is sometimes set to GET or POST even when there has been no form submitted for that particular page, so I wouldn't advise using that method.
Last edited by kkhugs; Dec 29th, 2012 at 07:57 PM.
-
Mar 18th, 2015, 01:20 AM
#10
Fanatic Member
Re: [PHP] Checking if a form has been submitted, the correct way...
Originally Posted by I_Love_My_Vans
PHP Code:
if(isset($_POST['submit']))
There are two ways of submitting a form, one is to click the submit button, the other is to hit return, of which will envoke the submit button. The problem occurs when you hit the return button (as most people do), when using Internet Explorer (the most commonly used browser) and when the submit button does not have focus. This will submit the form, but it will not send the submit variable, which would mean the script we are using above will fail.
@love_vans
As I am new to web development, I think i need little more explanation. Your above-mentioned text I made it bold, is little not picking to my mind. If you please little explain it to me so I would grasp it properly. That why this way is not working everywhere.
Despite this flaw, there is an easy solution:
Code:
<input type='hidden' name='submit' />
Here we are setting a hidden variable within our form, so no matter how the form is submitted, the submit variable will always be posted, this means there is no requirement to modify how your PHP works.
I need little more explanation on this hidden field too. I found this code in so many code snippets even in books. But non of them could explain it that how thing actually works.
Thanks a lot if you could provide me this detail.
Tags for this Thread
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|