Form handling execution flow in PHP - Step-by-Step Execution

Concept Flow - Form handling execution flow

User opens form page

↓

Form displayed in browser

↓

User fills form and submits

↓

Server receives POST data

↓

Server validates data

↓

Process

↓

Show success

↓

End

This flow shows how a form is displayed, submitted, validated, and processed or rejected.

Execution Sample

PHP

<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  $name = trim($_POST['name'] ?? '');
  if ($name === '') {
    $error = 'Name is required';
  } else {
    $success = "Hello, $name!";
  }
}
?>

This PHP code handles a form submission, checks if the name is empty, and sets an error or success message.

Execution Table

Step	Action	Input Data	Condition	Result	Output
1	Page loaded first time	No POST data	Request method is GET	Show empty form	Form displayed
2	User submits form	POST with name=''	Name is empty	Set error message	Error: 'Name is required'
3	Show form again	Error present	Display error	Form with error shown	Form with error message
4	User submits form	POST with name='Alice'	Name is not empty	Set success message	Success: 'Hello, Alice!'
5	Show success	Success present	Display success	Show greeting	Greeting displayed
6	End	Process complete	No further action	Stop execution	End of flow

💡 Execution stops after showing success or error and form again.

Variable Tracker

Variable	Start	After Step 2	After Step 4	Final
$_SERVER['REQUEST_METHOD']	GET	POST	POST	POST
$_POST['name']	N/A	'' (empty)	'Alice'	'Alice'
$name	N/A	'' (empty)	'Alice'	'Alice'
$error	N/A	'Name is required'	N/A	N/A
$success	N/A	N/A	'Hello, Alice!'	'Hello, Alice!'

Key Moments - 3 Insights

Why does the form show again with an error message after submitting an empty name?

Because the condition at step 2 detects the name is empty and sets $error, so the form is redisplayed with the error message as shown in step 3.

Why do we check $_SERVER['REQUEST_METHOD'] before processing the form?

To know if the user just opened the page (GET) or submitted the form (POST). Only POST means we handle submitted data, as seen in step 1 and 2.

What happens if the name is valid?

At step 4, the code sets $success with a greeting, then at step 5 it shows the success message instead of the form.

Visual Quiz - 3 Questions

Look at the execution table, what is the value of $error after step 2?

A 'Name is required'

B '' (empty string)

C null

D 'Hello, Alice!'

💡 Hint

Check the 'Result' and 'Output' columns at step 2 in the execution table.

At which step does the server detect the form was submitted with a valid name?

A Step 1

B Step 3

C Step 4

D Step 5

💡 Hint

Look for the step where $success is set with a greeting in the execution table.

If the user submits the form with name='Bob', what will $success be after processing?

A 'Name is required'

B 'Hello, Bob!'

C '' (empty string)

D null

💡 Hint

Refer to the variable_tracker row for $success after valid input.

Concept Snapshot

Form handling in PHP:
- Check $_SERVER['REQUEST_METHOD'] for POST
- Access submitted data via $_POST
- Validate inputs (e.g., empty check)
- Set error or success messages
- Redisplay form with messages or show success
- Repeat cycle on user actions

Full Transcript

This visual execution shows how PHP handles a form submission. First, the user opens the form page (GET request), so the form is displayed empty. When the user submits the form (POST request), the server checks the submitted name. If the name is empty, it sets an error message and shows the form again with the error. If the name is valid, it sets a success message and shows a greeting. Variables like $_POST['name'], $error, and $success change values step by step. This flow helps beginners understand how form data moves from browser to server and back with feedback.

Practice

1. What is the main purpose of checking $_SERVER['REQUEST_METHOD'] == 'POST' in PHP form handling?

easy

A. To display the form to the user

B. To ensure the form data is processed only when the form is submitted

C. To reset the form fields

D. To connect to the database

Solution

1. Step 1: Understand the role of $_SERVER['REQUEST_METHOD']

   This variable tells us how the page was requested, for example, via GET or POST.

2. Step 2: Check why we compare it to 'POST'

   When the form is submitted, it usually sends data via POST. Checking this ensures we only process data after submission.

3. Final Answer:

   To ensure the form data is processed only when the form is submitted -> Option B

4. Quick Check:

   Request method check = process form only after submit [OK]

Hint: Process form only if request method is POST [OK]

Common Mistakes:

• Processing form data without checking request method
• Confusing GET and POST methods
• Trying to process form before submission

2. Which of the following is the correct way to start processing form data only after submission in PHP?

easy

A. if ($_SERVER['REQUEST_METHOD'] == 'POST') { /* process form */ }

B. if ($_SERVER['REQUEST_METHOD'] = 'POST') { /* process form */ }

C. if ($_POST) { /* process form */ }

D. if ($_GET['submit']) { /* process form */ }

Solution

1. Step 1: Identify correct comparison operator

   if ($_SERVER['REQUEST_METHOD'] = 'POST') { /* process form */ } uses a single equals sign (=) which assigns, not compares. This is incorrect.

2. Step 2: Check proper request method check

   if ($_SERVER['REQUEST_METHOD'] == 'POST') { /* process form */ } correctly uses double equals (==) to compare $_SERVER['REQUEST_METHOD'] to 'POST'.

3. Final Answer:

   if ($_SERVER['REQUEST_METHOD'] == 'POST') { /* process form */ } -> Option A

4. Quick Check:

   Use '==' to compare request method [OK]

Hint: Use '==' to compare request method, not '=' [OK]

Common Mistakes:

• Using '=' instead of '==' for comparison
• Checking $_POST without verifying request method
• Using $_GET when form uses POST

3. What will be the output of this PHP code when the form is submitted with name=John?

<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $name = $_POST['name'] ?? 'Guest';
    echo "Hello, $name!";
} else {
    echo "Please submit the form.";
}
?>

medium

A. Undefined index error

B. Please submit the form.

C. Hello, Guest!

D. Hello, John!

Solution

1. Step 1: Check request method condition

   If the form is submitted, the request method is POST, so the if block runs.

2. Step 2: Retrieve and display the name

   The code uses $_POST['name'] ?? 'Guest' which means if 'name' exists, use it; else use 'Guest'. Since 'name=John' is submitted, it uses 'John'.

3. Final Answer:

   Hello, John! -> Option D

4. Quick Check:

   POST with name=John outputs Hello, John! [OK]

Hint: Check if POST data exists, then use it or default [OK]

Common Mistakes:

• Not checking request method before accessing $_POST
• Expecting output without form submission
• Forgetting null coalescing operator ??

4. Identify the error in this PHP form handling snippet:

<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $email = $_POST['email'];
}
echo "Email: $email";
?>

medium

A. Echoing variable outside the if block without initialization

B. Using $_POST without checking if 'email' exists

C. Missing semicolon after echo statement

D. Incorrect request method check

Solution

1. Step 1: Analyze variable scope and initialization

   The variable $email is assigned only inside the if block, so if the request method is not POST, it remains undefined.

2. Step 2: Check usage of variable outside if block

   Echoing $email outside the if block without initialization causes a notice or error if the form is not submitted.

3. Final Answer:

   Echoing variable outside the if block without initialization -> Option A

4. Quick Check:

   Use variable only after initialization [OK]

Hint: Initialize variables before use outside condition [OK]

Common Mistakes:

• Assuming variables inside if exist outside
• Not initializing variables before echo
• Ignoring request method check

5. You want to keep the user's input visible in the form field after submission to improve user experience. Which PHP code snippet correctly achieves this for a text input named username?

hard

A. <input type='text' name='username' value='<?php echo $_POST['username']; ?>'>

B. <input type='text' name='username' value='<?php echo $_GET['username']; ?>'>

C. <input type='text' name='username' value='<?php echo htmlspecialchars($_POST['username'] ?? ''); ?>'>

D. <input type='text' name='username' value='<?php echo $_POST['username'] ?? 'Guest'; ?>'>

Solution

1. Step 1: Ensure safe output in HTML attribute

   Using htmlspecialchars() prevents HTML injection and ensures special characters display correctly.

2. Step 2: Use null coalescing operator to avoid undefined index

   $_POST['username'] ?? '' ensures the value is empty string if not set, avoiding errors.

3. Final Answer:

   <input type='text' name='username' value='<?php echo htmlspecialchars($_POST['username'] ?? ''); ?>'> -> Option C

4. Quick Check:

   Use htmlspecialchars and ?? for safe, persistent input [OK]

Hint: Use htmlspecialchars and ?? to keep input safe and visible [OK]

Common Mistakes:

• Not using htmlspecialchars causing XSS risk
• Not handling unset $_POST causing errors
• Using $_GET when form uses POST