Question

I have a php page that generates a form. The action attribute of the form is the page itself. After the user submits the form, the same page is loaded, but this time a POST variable is set, so the page runs another script to deal with the incoming data from the form. I do this by using a conditional fork:

if(isset($_POST['var'])){
    generate form
}else{
    insert $_POST data into database
}

I’d like to know if this is ok or a bad idea.

Answer 1

The bad part is setting the action attribute to the script. Omitting it completely indicates to the browser that it should be posted to the same URL.