Question

I have a huge form with inputs of type (text, checkboxes, hidden et). The content of the form inputs are taken from a database. The user has to make some changes and to save the data back into the db.

At this moment I’m using a function which has a foreach($_POST as $key=>$value) loop. As you know, there are problems with post method:

1. can’t make refresh,
2. can’t go backwards.

I’ll like to use $_GET method, but the length of my variables and values are bigger than 2000 characters.

Do you have any advice for me, about what can I do? Maybe there are some tricks in using $_GET. Maybe i didn’t understand how to use it right?

Answer 1

There is absolutely nothing wrong in POST itself. You just have to use it properly
An HTTP standard says you ought to make a GET redirect after receiving POST request.
So, as easy code as this

    header("Location: ".$_SERVER['PHP_SELF']);
    exit;

after processing your form will solve all your “problems”

in case you want to handle post errors, you can use POST/Redirect/GET pattern.
However it does not redirect on error, the problems you mentioned becoming negligible.

here is a concise example of it:

<?  
if ($_SERVER['REQUEST_METHOD']=='POST') {  
  //processing the form    
  $err = array();
  //performing all validations and raising corresponding errors
  if (empty($_POST['name']) $err[] = "Username field is required";  
  if (empty($_POST['text']) $err[] = "Comments field is required";  

  if (!$err) {  
    //if no errors - saving data and redirect
    header("Location: ".$_SERVER['PHP_SELF']);
    exit;
  }  else {
    // all field values should be escaped according to HTML standard
    foreach ($_POST as $key => $val) {
      $form[$key] = htmlspecialchars($val);
    }
} else {
  $form['name'] = $form['comments'] = '';  
}
include 'form.tpl.php';
?>  

on error it will show the form back. but after successful form submit it will redirect as well.