Handling data from HTML forms

October 12, 2017

HTML Form -> PHP

code

<form action="contact.php" method="post">
  <label for="contactName">Name</label>
  <input type="text" id="contactName" name="contactName" />
  <button type="submit">Submit</button>
</form>

Wichtig:

action = Ziel URL
method = HTTP Verb (post/get)
name = Key in $_POST oder $_GET
id + label for = Accessibility

Daten in PHP lesen

code

<?php
$name = $_POST["contactName"] ?? "";
echo "Hello " . htmlspecialchars($name, ENT_QUOTES, "UTF-8");
?>

Sicherheit

Eingaben immer validieren
Ausgabe immer escapen (htmlspecialchars)
Bei Formularen mit Side Effects: CSRF Token nutzen