POST Method in PHP Forms

The PHP POST method securely submits form, data to a PHP file. POST differs from GET in that POST data is not visible in the URL and therefore is more secure; therefore POST is frequently used for authentication credentials such as username and password.

How the POST Method Works

First, an HTML form is used to gather information from the user.
After this, the browser sends this information inside the request body instead of inside the URL
Lastly, PHP gathers the data through using the $_POST superglobal variable.

Thus user details are not visible in the address bar of the browser.

Simple Example of POST Method

HTML Form

<form method="post" action="process.php">
    <input type="text" name="username">
    <input type="password" name="password">
    <input type="submit" value="Login">
</form>

PHP Code

<?php
$username = $_POST['username'];
$password = $_POST['password'];

echo "Welcome, " . $username;
?>

In this case the input data does not show in the URL, making the form more secure.

When to Use POST Method

The POST method should be used if your form is processing data that is sensitive or that will be large in volume. The POST method is used for login, registration, contact, and file upload forms. So, for privacy and security reasons, the POST method is to be used.

Advantages of POST Method

The most notable benefit of POST is security. This is because the data cannot be seen within the URL, unlike GET which displays data within the URL. Moreover POST can also handle large amounts of data without limitations of URL length. Therefore it is suitable for handling complex forms.

Disadvantages of POST Method

You cannot bookmark a POST data and it can’t be Shared as it is. Also, Debugging gets a little bit difficult as data is not seen in URL. But for sensitive operation this drawback is reasonable.

Summary of POST Method

The POST method is a method used to get data from an HTML form to the server. Because the POST method sends the form data anonymously that can not be visible in browser URL and user can store the data anonymously. Then PHP can collect this data in $_POST variable. When compared to the GET method, POST method is used for private and critical data.

GET vs POST Comparison Table

Feature	GET Method	POST Method
Data visibility	Visible in URL	Hidden from URL
Security	Less secure	More secure
Data size	Limited	No practical limit
Bookmarking	Possible	Not possible
Best use case	Search, filters, pagination	Login, registration, forms
SEO friendly	Yes	No
PHP variable	$_GET	$_POST

Which One Should You Use

Use GET if data is straightforward, public, and multiple URL copies are acceptable.
Use POST if the data is private or sensitive or if it is big.

Knowing both techniques enables the newcomer to create safe and user friendly PHP applications.

Common Mistakes Beginners Make with GET and POST

Most of the new beginners tend to always go through the GET method because it looks simple to use. But if one chooses GET to send passwords or any other personal data, the user will expose his data. So make sure you use the right method for the right message.

Another mistake is not testing if the form has been submitted before trying to gethold of $_GET or $_POST. This can cause errors, warnings. To do so, always give issetbeforehand.

if (isset($_POST['username'])) {
    echo $_POST['username'];
}

Handling Form Submission Safely

POST does not send data in the URL, but by itself it doesn‘t provide a secure environment. Always validate and filter information that you receive from users, this minimizes unwanted data and common security flaws.

For example, trimming spaces and checking empty fields improves form reliability.

$username = trim($_POST['username']);
if ($username == "") {
    echo "Username is required";
}

Using $_REQUEST Variable

The $_REQUEST superglobal is also offered by PHP. It can aggregate information sent through GET and POST at the same time. This looks quite practical, but in a real application, users shouldn‘t use it, because mixing request types in the same script might be confusing and even dangerous. Anyway, it is preferable to use either $_GET or $_POST.

Real Life Example of GET and POST Together

In many websites both methods are used parallel. For instance, a page listing products might use GET queries to filter the list by categories. Shortly after, a customer on the same site fills in a checkout form, which sends the data back to the server using POST.

Best Practices for Beginners

Use always POST no matter what while transmitting sensitive information.
GET should be used in only a few cases for public and easy, to, digest data.
Validate all form inputs
Don‘t trust user input blindly.
Check if form data exists before using it.

Summary

GET and POST are the two main PHP methods of form handling. GET is ideal for data that‘s display, oriented and can be viewed by the user; you‘ll often find GET used for searches, forms, filters, etc. While POST is more for data that‘s private and can be used by transmission only.

Looking for clean code? Explore our latest Bootstrap Projects.

Want to stay ahead of the curve? Download our latest tech guides in the Free E-Books section.