$_POST for form submissions in PHP

Introduction

$_POST helps you get the information people type into a form on your website. It makes your site interactive by letting you use what users send.

When you want to collect user login details like username and password.

When users fill out a contact form and you want to save or email their message.

When you have a survey or quiz and want to process the answers.

When users submit data that should not show in the website address bar.

When you want to handle form data securely and privately.

Syntax

PHP

<?php
$value = $_POST['field_name'];
?>

Use the exact name attribute from your HTML form input inside the square brackets.

$_POST is an associative array that holds all form data sent by the POST method.

Examples

This gets the value typed in the input named 'name' and says hello.

PHP

<?php
$name = $_POST['name'];
echo "Hello, $name!";
?>

This safely gets the 'email' input or shows a default message if empty.

PHP

<?php
$email = $_POST['email'] ?? 'No email provided';
echo "Email: $email";
?>

This checks if the form was submitted before using the data.

PHP

<?php
if (isset($_POST['submit'])) {
    $message = $_POST['message'];
    echo "You wrote: $message";
}
?>

Sample Program

This page shows a form asking for a username. When you type your name and press Send, it greets you below the form. It uses $_POST to get the username safely.

PHP

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Simple Form</title>
</head>
<body>
    <form method="post" action="">
        <label for="username">Username:</label>
        <input type="text" id="username" name="username" required>
        <br><br>
        <input type="submit" name="submit" value="Send">
    </form>

    <?php
    if (isset($_POST['submit'])) {
        $user = htmlspecialchars($_POST['username']);
        echo "<p>Hello, $user! Welcome to the site.</p>";
    }
    ?>
</body>
</html>

Important Notes

Always use htmlspecialchars() or similar to avoid security issues when showing user input.

$_POST only works if your form uses method="post".

If the form is not submitted, $_POST will be empty, so check with isset() before using.

Summary

$_POST collects data sent by a form using the POST method.

Use the input's name attribute to get its value from $_POST.

Always check if the form was submitted before using $_POST data.

Practice

1. What does the $_POST variable in PHP do?

easy

A. It deletes form data after submission.

B. It stores data sent by a form using the GET method.

C. It sends data from the server to the client.

D. It collects data sent by a form using the POST method.

Solution

1. Step 1: Understand the purpose of $_POST

   $_POST is a superglobal array in PHP that collects data sent by a form using the POST method.

2. Step 2: Differentiate from other methods

   Unlike $_GET, which collects data sent via URL parameters, $_POST collects data sent in the request body.

3. Final Answer:

   It collects data sent by a form using the POST method. -> Option D

4. Quick Check:

   $_POST collects POST form data [OK]

Hint: Remember: $_POST = form data sent via POST method [OK]

Common Mistakes:

• Confusing $_POST with $_GET
• Thinking $_POST sends data instead of receiving
• Assuming $_POST deletes data

2. Which of the following is the correct way to access a form input named username sent via POST in PHP?

easy

A. $_POST['username'];

B. $_POST->username;

C. post['username'];

D. $_POST.username;

Solution

1. Step 1: Identify correct syntax for accessing $_POST data

   $_POST is an associative array, so we use square brackets and quotes to access values by key.

2. Step 2: Check each option

   $_POST['username']; uses $_POST['username'], which is the correct syntax. Others use invalid syntax for arrays in PHP.

3. Final Answer:

   $_POST['username']; -> Option A

4. Quick Check:

   Use $_POST['name'] to get form data [OK]

Hint: Use square brackets and quotes to access $_POST keys [OK]

Common Mistakes:

• Using arrow (->) instead of brackets
• Missing quotes around key
• Using dot (.) notation for arrays

3. What will be the output of this PHP code if the form sends name=John via POST?

<?php
if (isset($_POST['name'])) {
    echo 'Hello, ' . $_POST['name'];
} else {
    echo 'No name provided';
}
?>

medium

A. Hello,

B. No name provided

C. Hello, John

D. Undefined index error

Solution

1. Step 1: Check if 'name' key exists in $_POST

   The code uses isset($_POST['name']) which returns true if 'name' is sent via POST.

2. Step 2: Output greeting with the name

   Since 'name' is sent as 'John', the code echoes 'Hello, John'.

3. Final Answer:

   Hello, John -> Option C

4. Quick Check:

   isset($_POST['name']) true, output greeting [OK]

Hint: Check isset before using $_POST to avoid errors [OK]

Common Mistakes:

• Not checking isset and causing errors
• Assuming output is 'No name provided'
• Confusing POST and GET data

4. Identify the error in this PHP code snippet handling a POST form:

<?php
if ($_POST['email']) {
    echo 'Email: ' . $_POST['email'];
} else {
    echo 'No email provided';
}
?>

medium

A. Missing quotes around 'email' key

B. No check if $_POST['email'] is set before use

C. Using GET method instead of POST

D. Incorrect echo syntax

Solution

1. Step 1: Analyze use of $_POST['email'] without isset

   The code accesses $_POST['email'] directly without checking if it exists, which can cause an undefined index notice if form not submitted.

2. Step 2: Explain proper check

   Use isset($_POST['email']) to verify the key exists before accessing it.

3. Final Answer:

   No check if $_POST['email'] is set before use -> Option B

4. Quick Check:

   Always check isset($_POST['key']) before use [OK]

Hint: Always use isset() before accessing $_POST keys [OK]

Common Mistakes:

• Accessing $_POST keys without isset
• Confusing POST and GET methods
• Syntax errors in echo statement

5. You want to create a PHP script that safely processes a form with inputs username and password sent via POST. Which code snippet correctly checks if the form was submitted and then accesses both inputs?

hard

A. <?php
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$user = $_POST['username'] ?? '';
$pass = $_POST['password'] ?? '';
echo "User: $user, Pass: $pass";
} else {
echo 'Form not submitted';
}
?>

B. <?php
if (isset($_POST['submit'])) {
$user = $_POST['username'];
$pass = $_POST['password'];
echo "User: $user, Pass: $pass";
}
?>

C. <?php
if ($_POST) {
echo $_POST['username'] . $_POST['password'];
}
?>

D. <?php
if ($_POST['username'] && $_POST['password']) {
echo 'Logged in';
}
?>

Solution

1. Step 1: Check form submission safely

   <?php if ($_SERVER['REQUEST_METHOD'] === 'POST') { $user = $_POST['username'] ?? ''; $pass = $_POST['password'] ?? ''; echo "User: $user, Pass: $pass"; } else { echo 'Form not submitted'; } ?> uses $_SERVER['REQUEST_METHOD'] === 'POST' to confirm form submission, which is reliable.

2. Step 2: Access inputs safely with null coalescing

   It uses $_POST['username'] ?? '' to avoid undefined index errors if inputs are missing.

3. Step 3: Compare other options

   <?php if (isset($_POST['submit'])) { $user = $_POST['username']; $pass = $_POST['password']; echo "User: $user, Pass: $pass"; } ?> depends on a submit button named 'submit' which may not exist. <?php if ($_POST) { echo $_POST['username'] . $_POST['password']; } ?> lacks isset checks. <?php if ($_POST['username'] && $_POST['password']) { echo 'Logged in'; } ?> risks errors if keys missing.

4. Final Answer:

   Option A code snippet -> Option A

5. Quick Check:

   Use $_SERVER['REQUEST_METHOD'] and ?? for safe POST access [OK]

Hint: Check $_SERVER['REQUEST_METHOD'] and use ?? to avoid errors [OK]

Common Mistakes:

• Not verifying form submission method
• Assuming submit button always sent
• Accessing $_POST keys without fallback