PHP form learning: The use and difference of $_GET and $

Home

Backend Development

PHP Tutorial

PHP form learning: The use and difference of $_GET and $_POST variables

WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWB

Oct 29, 2021 pm 04:28 PM

phpform validation

In the previous article, I brought you "PHP form learning: How to verify the email and URL in the form?" ", which introduces in detail the knowledge about how to verify emails and URLs in forms in PHP. In this article, we take a look at the $_GET variables and $_POST variables in PHP. I hope everyone has to help!

PHP form learning: The use and difference of $_GET and $_POST variables

In the previous article we have learned how to validate the required data and how to validate the email and URL in the form through regular expressions. Among them are the shadows of $_GET variables and $_POST variables. Next, let’s take a look at $_GET variables and $_POST Knowledge related to the use of variables.

PHP $_GET Variables

We have learned about it before when we were studying# The ##$_GET variable is used to collect values from the form with method="get". Information sent from a form with the GET method is visible to everyone (displayed in the browser's address bar), and there are limits on the amount of information sent. In fact, it can also be viewed as an array of variables passed to the current script through URL parameters.

When using $_GET variables, all variable names and values will be displayed in the URL. So this method should not be used when sending passwords or other sensitive information. However, because the variables appear in the URL, you can bookmark the page. In some cases this is useful.

Next let’s take a look at an example:

<html>
 <head>
     <meta charset="utf-8">
     <title>php中文网(php.cn)</title>
 </head>
 <body>
 
 <form action="demo.php" method="get">
     名字: <input type="text" name="name"><br>
     性别：<input type="radio" name="sex" value="男" checked>男
     <input type="radio" name="sex" value="女">女<br>
     年龄: <input type="text" name="age"><br>
     <input type="submit" value="提交">
 </form>
 
 </body>
 </html>

The content submitted to demo.php is:

<?php
 header("Content-type:text/html;charset=utf-8");    //设置编码
 echo "你的姓名是：" .$_GET[&#39;name&#39;] ."<br/>";
 echo "你的性别是："  .$_GET[&#39;sex&#39;]."<br/>";
 echo "你的年龄是：".$_GET[&#39;age&#39;];
 ?>

Output result:

PHP form learning: The use and difference of $_GET and $_POST variables

We found that the values we filled in the form are all displayed in the Url column. So when do we use method="get"?

When using

method="get" in an HTML form, all variable names and values will be displayed in the URL. So you should not use this method when sending passwords or other sensitive information! However, because the variables appear in the URL, you can bookmark the page. In some cases this is useful.

It should be noted that the HTTP GET method is not suitable for large variable values. Its value cannot exceed 2000 characters.

$_POST Variables

In the above example we Having talked about the

$_GET variable, let’s take a look at the $_POST variable. The predefined $_POST variable is used to collect data from method= The value in the form of "post".

The information sent from the form with the POST method is not visible to anyone and will not be displayed in the browser's address bar like the

$_GET variable, and is not visible to anyone. There is also no limit to the amount of information. However, by default, the maximum amount of information sent by the POST method is 8 MB, which can be changed by setting post_max_size in the php.ini file.

Next let’s take a look at an example:

<html>
 <head>
     <meta charset="utf-8">
     <title>php中文网(php.cn)</title>
 </head>
 <body>
 
 <form action="demo.php" method="post">
     名字: <input type="text" name="name"><br>
     性别：<input type="radio" name="sex" value="男" checked>男
     <input type="radio" name="sex" value="女">女<br>
     年龄: <input type="text" name="age"><br>
     <input type="submit" value="提交">
 </form>
 
 </body>
 </html>

The content submitted to demo.php is:

<?php
 header("Content-type:text/html;charset=utf-8");    //设置编码
 echo "你的姓名是：" .$_POST[&#39;name&#39;] ."<br/>";
 echo "你的性别是："  .$_POST[&#39;sex&#39;]."<br/>";
 echo "你的年龄是：".$_POST[&#39;age&#39;];
 ?>

Output result:

PHP form learning: The use and difference of $_GET and $_POST variables

We see that the information we submitted using POST is not displayed in the Url column, so POST is safer than GET. Let's summarize the differences between $_GET and $_POST. The difference between

##$_GET and $_POST

get

is to obtain data from the server, and post is to transmit data to the server. get adds the parameter data queue to the URL pointed to by the ACTION attribute of the submitted form. The value corresponds to each field in the form and can be seen in the URL. Post uses the HTTP post mechanism to place each field in the form and its content in the HTML HEADER and transmit it to the URL address pointed to by the ACTION attribute. Users cannot see this process.

For the get method, the server side uses Request.QueryString to obtain the value of the variable. For the post method, the server side uses Request.Form to obtain the submitted data.

The amount of data transferred by get is small and cannot be larger than 2KB. The amount of data transmitted by post is relatively large and is generally unrestricted by default. But in theory, the maximum amount is 80KB in IIS4 and 100KB in IIS5.

Get security is very low, post security is high. But the execution efficiency is better than the Post method.

The differences between the two are organized into a table. The table is as follows:

##$_GET$_POSTDisplay in url There will be a limit on the number of characters that will be displayed in the URL will not be displayed in the URL The amount of data submitted Generally a small amount of data less than 2kPHP can submit a large amount of 8M data by default##In terms of securitySubmission principleFlexibilityCommon usageThrough the difference we can conclude:




Unsafe	More secure
The submitted data is isolated	Submit the data as a whole
Very flexible, you can transfer data with a page jump	Not flexible, you must have the participation of a form
More commonly used	Less compared with $_GET

PHP Video tutorial

》Learn more about PHP knowledge.

The above is the detailed content of PHP form learning: The use and difference of $_GET and $_POST variables. For more information, please follow other related articles on the PHP Chinese website!

Statement

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

When would you use a trait versus an abstract class or interface in PHP?Apr 10, 2025 am 09:39 AM

In PHP, trait is suitable for situations where method reuse is required but not suitable for inheritance. 1) Trait allows multiplexing methods in classes to avoid multiple inheritance complexity. 2) When using trait, you need to pay attention to method conflicts, which can be resolved through the alternative and as keywords. 3) Overuse of trait should be avoided and its single responsibility should be maintained to optimize performance and improve code maintainability.

What is a Dependency Injection Container (DIC) and why use one in PHP?Apr 10, 2025 am 09:38 AM

Dependency Injection Container (DIC) is a tool that manages and provides object dependencies for use in PHP projects. The main benefits of DIC include: 1. Decoupling, making components independent, and the code is easy to maintain and test; 2. Flexibility, easy to replace or modify dependencies; 3. Testability, convenient for injecting mock objects for unit testing.

Explain the SPL SplFixedArray and its performance characteristics compared to regular PHP arrays.Apr 10, 2025 am 09:37 AM

SplFixedArray is a fixed-size array in PHP, suitable for scenarios where high performance and low memory usage are required. 1) It needs to specify the size when creating to avoid the overhead caused by dynamic adjustment. 2) Based on C language array, directly operates memory and fast access speed. 3) Suitable for large-scale data processing and memory-sensitive environments, but it needs to be used with caution because its size is fixed.

How does PHP handle file uploads securely?Apr 10, 2025 am 09:37 AM

PHP handles file uploads through the $\_FILES variable. The methods to ensure security include: 1. Check upload errors, 2. Verify file type and size, 3. Prevent file overwriting, 4. Move files to a permanent storage location.

What is the Null Coalescing Operator (??) and Null Coalescing Assignment Operator (??=)?Apr 10, 2025 am 09:33 AM

In JavaScript, you can use NullCoalescingOperator(??) and NullCoalescingAssignmentOperator(??=). 1.??Returns the first non-null or non-undefined operand. 2.??= Assign the variable to the value of the right operand, but only if the variable is null or undefined. These operators simplify code logic, improve readability and performance.

What is Content Security Policy (CSP) header and why is it important?Apr 09, 2025 am 12:10 AM

CSP is important because it can prevent XSS attacks and limit resource loading, improving website security. 1.CSP is part of HTTP response headers, limiting malicious behavior through strict policies. 2. The basic usage is to only allow loading resources from the same origin. 3. Advanced usage can set more fine-grained strategies, such as allowing specific domain names to load scripts and styles. 4. Use Content-Security-Policy-Report-Only header to debug and optimize CSP policies.

What are HTTP request methods (GET, POST, PUT, DELETE, etc.) and when should each be used?Apr 09, 2025 am 12:09 AM

HTTP request methods include GET, POST, PUT and DELETE, which are used to obtain, submit, update and delete resources respectively. 1. The GET method is used to obtain resources and is suitable for read operations. 2. The POST method is used to submit data and is often used to create new resources. 3. The PUT method is used to update resources and is suitable for complete updates. 4. The DELETE method is used to delete resources and is suitable for deletion operations.

What is HTTPS and why is it crucial for web applications?Apr 09, 2025 am 12:08 AM

HTTPS is a protocol that adds a security layer on the basis of HTTP, which mainly protects user privacy and data security through encrypted data. Its working principles include TLS handshake, certificate verification and encrypted communication. When implementing HTTPS, you need to pay attention to certificate management, performance impact and mixed content issues.

See all articles

Hot AI Tools

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress images for free

Clothoff.io

AI clothes remover

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)

3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

R.E.P.O. Best Graphic Settings

3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

Assassin's Creed Shadows: Seashell Riddle Solution

1 weeks agoByDDD

R.E.P.O. How to Fix Audio if You Can't Hear Anyone

3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

WWE 2K25: How To Unlock Everything In MyRise

3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Dreamweaver CS6

Visual web development tools

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software