HTML forms with POST method in Flask

Introduction

HTML forms with the POST method let users send data to a server safely. This is useful when you want to submit information like login details or comments.

When a user needs to send sensitive data like passwords.

When submitting a form that changes data on the server, like adding a comment.

When uploading files through a web page.

When you want to avoid showing form data in the URL.

When sending large amounts of data from a form.

Syntax

Flask

<form action="/submit" method="post">
  <input type="text" name="username" />
  <input type="submit" value="Send" />
</form>

The action attribute tells the form where to send the data.

The method="post" means data is sent in the request body, not in the URL.

Examples

A login form sending username and password securely using POST.

Flask

<form action="/login" method="post">
  <label for="user">Username:</label>
  <input type="text" id="user" name="username" />
  <label for="pass">Password:</label>
  <input type="password" id="pass" name="password" />
  <button type="submit">Login</button>
</form>

A comment form where users can write and send text data.

Flask

<form action="/comment" method="post">
  <textarea name="comment" rows="4" cols="50"></textarea>
  <input type="submit" value="Post Comment" />
</form>

Sample Program

This Flask app shows a simple form asking for a name. When the user submits, the server receives the data using POST and replies with a greeting.

Flask

from flask import Flask, request, render_template_string

app = Flask(__name__)

form_html = '''
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <title>Simple POST Form</title>
</head>
<body>
  <h1>Enter Your Name</h1>
  <form action="/submit" method="post">
    <label for="name">Name:</label>
    <input type="text" id="name" name="username" required />
    <button type="submit">Send</button>
  </form>
</body>
</html>
'''

@app.route('/')
def index():
    return render_template_string(form_html)

@app.route('/submit', methods=['POST'])
def submit():
    username = request.form.get('username', '')
    return f"Hello, {username}! Your form was submitted successfully."

if __name__ == '__main__':
    app.run(debug=True)

Important Notes

Always use method="post" for sensitive or large data to keep it out of the URL.

Use request.form in Flask to access POSTed form data.

Include required on inputs to help users fill the form correctly.

Summary

HTML forms with POST send data safely in the request body.

Flask uses request.form to read POST data.

Use POST for login, comments, or any data that should not appear in the URL.

Practice

1. What does the POST method in an HTML form do in a Flask application?

easy

A. Automatically encrypts the form data before sending

B. Sends form data appended to the URL as query parameters

C. Prevents the form from submitting data

D. Sends form data inside the request body, not visible in the URL

Solution

1. Step 1: Understand HTTP methods in forms

   The POST method sends data inside the request body, keeping it hidden from the URL.

2. Step 2: Compare with GET method

   The GET method appends data to the URL, but POST does not, making it safer for sensitive data.

3. Final Answer:

   Sends form data inside the request body, not visible in the URL -> Option D

4. Quick Check:

   POST hides data in request body [OK]

Hint: POST sends data hidden in body, not URL [OK]

Common Mistakes:

• Confusing POST with GET method
• Thinking POST encrypts data automatically
• Believing POST prevents form submission

2. Which of the following is the correct way to specify a form that sends data using POST in HTML?

easy

A. ...

B. ...

C. ...

D. ...

Solution

1. Step 1: Identify the correct attribute for HTTP method

   The method attribute in the form tag defines how data is sent.

2. Step 2: Confirm correct value for POST

   Setting method='post' correctly configures the form to send data via POST.

3. Final Answer:

   <form method='post'>...</form> -> Option A

4. Quick Check:

   Use method='post' in form tag [OK]

Hint: Use method='post' attribute in form tag [OK]

Common Mistakes:

• Using 'action' instead of 'method' for HTTP method
• Writing method='get' when POST is needed
• Using non-standard attributes like 'send'

3. Given this Flask route and form, what will be printed when the form is submitted?

from flask import Flask, request
app = Flask(__name__)

@app.route('/submit', methods=['POST'])
def submit():
    name = request.form.get('name')
    return f'Hello, {name}!'

Send

medium

A. Hello, !

B. Hello, Alice!

C. Error: name not found

D. Hello, request.form!

Solution

1. Step 1: Understand form submission with POST

   The form sends the input named 'name' with value 'Alice' to the '/submit' route via POST.

2. Step 2: Check how Flask reads form data

   The route uses request.form.get('name') to get the value 'Alice' from the form data.

3. Final Answer:

   Hello, Alice! -> Option B

4. Quick Check:

   request.form.get('name') returns 'Alice' [OK]

Hint: request.form.get('name') reads POST form data [OK]

Common Mistakes:

• Using request.args instead of request.form for POST data
• Not specifying methods=['POST'] in route
• Missing the 'name' attribute in input

4. What is wrong with this Flask route that handles a POST form submission?

from flask import Flask, request
app = Flask(__name__)

@app.route('/login')
def login():
    username = request.form['username']
    return f'Welcome {username}'

medium

A. The route does not allow POST method, so form data won't be received

B. request.form['username'] should be request.args['username']

C. The route should use GET method instead of POST

D. Flask requires form data to be accessed via request.data

Solution

1. Step 1: Check route methods

   The route only allows GET by default, but form data sent by POST won't be processed.

2. Step 2: Confirm correct method usage

   To handle POST form data, the route must include methods=['POST'].

3. Final Answer:

   The route does not allow POST method, so form data won't be received -> Option A

4. Quick Check:

   Route must allow POST to read POST form data [OK]

Hint: Add methods=['POST'] to route decorator [OK]

Common Mistakes:

• Forgetting to add methods=['POST'] in route
• Using request.args for POST data
• Trying to access form data via request.data

5. You want to create a Flask route that accepts a POST form with fields 'username' and 'password'. It should return 'Login successful' only if username is 'admin' and password is 'secret', otherwise 'Login failed'. Which code snippet correctly implements this?

hard

A. from flask import Flask, request
app = Flask(__name__)

@app.route('/login', methods=['GET'])
def login():
user = request.form['username']
pwd = request.form['password']
if user == 'admin' and pwd == 'secret':
return 'Login successful'
else:
return 'Login failed'

B. from flask import Flask, request
app = Flask(__name__)

@app.route('/login')
def login():
user = request.args.get('username')
pwd = request.args.get('password')
if user == 'admin' and pwd == 'secret':
return 'Login successful'
else:
return 'Login failed'

C. from flask import Flask, request
app = Flask(__name__)

@app.route('/login', methods=['POST'])
def login():
user = request.form.get('username')
pwd = request.form.get('password')
if user == 'admin' and pwd == 'secret':
return 'Login successful'
else:
return 'Login failed'

D. from flask import Flask, request
app = Flask(__name__)

@app.route('/login', methods=['POST'])
def login():
user = request.form['username']
if user == 'admin':
return 'Login successful'
else:
return 'Login failed'

Solution

1. Step 1: Ensure route accepts POST method

   The route must specify methods=['POST'] to handle form POST data.

2. Step 2: Correctly read both 'username' and 'password' from request.form

   Use request.form.get() to safely get both fields and check their values.

3. Step 3: Implement correct login logic

   Return 'Login successful' only if both username and password match expected values; otherwise return 'Login failed'.

4. Final Answer:

   The code with methods=['POST'], request.form.get() for both fields, and checks both credentials -> Option C

5. Quick Check:

   from flask import Flask, request app = Flask(__name__) @app.route('/login', methods=['POST']) def login(): user = request.form.get('username') pwd = request.form.get('password') if user == 'admin' and pwd == 'secret': return 'Login successful' else: return 'Login failed' [OK]

Hint: Use methods=['POST'] and request.form.get for form fields [OK]

Common Mistakes:

• Using GET method instead of POST
• Reading form data from request.args
• Checking only username without password