| SitePoint Sponsor |
I am doing a form that I want to post to itself. I have the form under the php it is a simple contact form. I did one years ago but got away from this and now I want to get back into it so its almost like starting over.
is this correct... <form action="self" method="post">?
Pat
Hi Pat,
should do it.PHP Code:<form name="myForm" action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post" >
Mike Swiffin - Community Team Leader
Only a woman can read between the lines of a one word answer.....
I started out with nothing... and still got most of it left!
Thank-you Spike That sure was fast.
you're welcome
Mike Swiffin - Community Team Leader
Only a woman can read between the lines of a one word answer.....
I started out with nothing... and still got most of it left!
Just leave the action attribute empty and it'll post to itself.Code:<form enctype="application/x-www-form-urlencoded" method="post" action="">
no as you then dont know where the form has come from and it will leave you open to XSS Cross Site Scripting Attacks.
Mike Swiffin - Community Team Leader
Only a woman can read between the lines of a one word answer.....
I started out with nothing... and still got most of it left!
Didn't know that thanksOriginally Posted by spikeZ
I always include action myself I just noticed it works even without it.
On the contrary, spikeZ's snippet is open to an XSS attack (PHP_SELF is not trustworthy) while risoknop's snippet is entirely safe...
But you shouldn't do either. The former has that vulnerability and the latter doesn't work on all browsers (well, as far as mobile browsers go) if I recall correctly.
PHP Code:<?php echo htmlspecialchars($_SERVER['PHP_SELF']); ?>
Posting Permissions
Bookmarks