PHP Form Handling – Get and Process Form Data

Introduction

Forms are an important part of almost every website. They allow users to send information to the server.

PHP provides powerful features for processing form data submitted through HTML forms. When a user fills out a form and clicks the submit button, the form data is sent to the server where PHP scripts can process it.

PHP form handling usually works with HTTP request methods such as GET and POST, and the data can be accessed using PHP superglobal variables. Understanding how PHP handles form data helps developers create functional and secure web applications.

What is PHP Form Handling?

PHP Form Handling is the process of collecting, processing, and managing data submitted by users through HTML forms using PHP scripts.

An HTML form is used to collect user input such as names, email addresses, passwords, comments, or search queries. Once the user submits the form, the data is sent to a server using a request method like GET or POST.

PHP receives the form data on the server side and processes it using special variables called superglobals, such as:

  • $_GET
  • $_POST
  • $_REQUEST

A form also includes important attributes like:

  • action – specifies where the form data will be sent
  • method – defines how the data will be sent (GET or POST)

For example, when a user submits a registration form, PHP can validate the input, store the information in a database, and show a success message.

Why It Is Used

PHP form handling is widely used in web development for many purposes. It allows websites to interact with users and process their input.

Here are some common reasons why PHP form handling is used:

1. Collect User Information

Websites often collect information like name, email, phone number, or feedback through forms.

2. Create Login and Registration Systems

Forms are used to allow users to sign up and log into websites.

3. Process Search Queries

Search boxes use forms to send user queries to the server.

4. Store Data in Databases

Form data can be stored in databases for future use.

5. Build Interactive Web Applications

PHP form handling makes websites dynamic and interactive.

Syntax

The basic syntax of PHP form handling involves creating an HTML form and accessing the submitted data using PHP superglobal variables.

HTML Form Example


<form method="post" action="process.php">
 Name: <input type="text" name="username">
 <input type="submit" value="Submit">
</form>

PHP Script


<?php
$name = $_POST['username'];
echo "Hello " . $name;
?>

Explanation:

  • The method=”post” sends the data using the POST method.
  • The action=”process.php” specifies the file that will process the form.
  • The PHP script accesses the form value using $_POST[‘username’].

Example

Below is a simple example of PHP form handling.

HTML Form


<form method="post" action="welcome.php">
 Enter your name:
 <input type="text" name="name">
 <input type="submit" value="Submit">
</form>

PHP File (welcome.php)


<?php
$name = $_POST['name'];
echo "Welcome " . $name;
?>

Explanation:

  1. The user enters their name in the form.
  2. When the submit button is clicked, the form sends the data to welcome.php.
  3. PHP receives the value using $_POST.
  4. The script displays a welcome message with the user’s name.

This simple example demonstrates how PHP can capture and display user input.

Real-Life Example

A common real-life example of PHP form handling is a contact form on a website.

When visitors want to contact a company or website owner, they usually fill out a contact form with information such as:

  • Name
  • Email
  • Subject
  • Message

After clicking the submit button, the form data is sent to the server. PHP processes this data and can perform actions such as:

  • Sending an email to the website owner
  • Storing the message in a database
  • Displaying a confirmation message to the user

Common Mistakes

While working with PHP form handling, beginners often make some common mistakes.

1. Not Validating User Input

Developers sometimes accept user input without validation, which may lead to incorrect data or security issues.

2. Using GET for Sensitive Information

The GET method sends data through the URL, which means sensitive information like passwords should never be sent using GET.

3. Not Checking If the Form Is Submitted

Sometimes developers try to access form values even when the form is not submitted. It is better to check the request method.

Example:


if ($_SERVER["REQUEST_METHOD"] == "POST") {
  // process form data
}

4. Not Sanitizing User Input

User input should be sanitized to prevent security risks such as cross-site scripting (XSS).

Example:


$name = htmlspecialchars($_POST['name']);

Conclusion

PHP form handling is a fundamental concept in web development that allows websites to collect and process user input. By using HTML forms and PHP scripts together, developers can build interactive features such as contact forms, login systems, registration pages, and search functionality.

PHP provides convenient superglobal variables like $_GET, $_POST, and $_REQUEST to access form data easily. However, developers must always validate and sanitize user input to ensure security and data accuracy.

Related PHP Tutorials