| ||
PHP Forms and User Input
PHP Form Handling
The most important thing to notice when dealing with HTML forms and PHP is
that any form element in an HTML page will automatically be available to your PHP scripts.
Form example:
<html> <form action="welcome.php" method="post"> </body> |
The example HTML page above contains two input fields and a submit button.
When the user fills in this form and click on the submit button, the form data
is sent to the "welcome.php"
file.
The "welcome.php" file looks like this:
<html> Welcome <?php echo $_POST["name"]; ?>.<br /> </body> |
A sample output of the above script may be:
Welcome John. |
The PHP $_GET and $_POST variables will be explained in the next chapters.
Form Validation
User input should be validated whenever possible. Client side validation is
faster, and will reduce server load.
However, any site that gets enough traffic to worry about server resources,
may also need to worry about site security. You should always use server side validation if
the form accesses a database.
A good way to validate a form on the server is to post
the form to itself, instead of jumping to a different page. The user will then
get the error messages on the same page as the form. This makes it easier to
discover the error.
posted by Computer @ 12:10,
