Question

In my system, a user will enter data into a form, and it will be processed by a PHP script.

This php script will manipulate this data around, and then needs to redirect the user to an https page, but also send along its own POST parameters.

So, for example, if

send-me.php?name=chuck+norris

is called, the user should be redirected to

https://secret.hideout.com/

where a POST parameters are

is_chuck="1"
be_polite="definitely"
run_away="what's the point?"

Is this possible? How?

Thanks

Answer 1

If you don’t control the target site, the only way I can see to do this is having a second <form> on the PHP page with the https:// URL as the target, and the values as hidden fields.

However, this way, the values remain manipulable by the user after your PHP script has changed them.

Alternatively, depending on the nature of what you need to do, consider manipulating the values on client side using JavaScript before the form gets posted.