CODEWITHSUNDEEP
phpformssearchparametersget
Tommy Plummer
Tommy Plummer

Reputation: 391

Appending GET parameters to URL from <form> action

So say I'm currently on index.php or index.php?p=about within my current web build.

I am trying to build a search form that will be displayed on most pages, but I want the form action to go to http://mywebsiteurl.com/?p=search&q=GETDATA, as my website's paging depends on the data passed to the 'p' attribute.

How would I append the search parameter to the URL in a static fashion, upon submission?

Upvotes: 1

Views: 20846

Answers (3)

Cyclonecode
Cyclonecode

Reputation: 30071

Perhaps something like this:

  <form method="get" action="index.php">
     <input type="hidden" name="p" value="search" />
     <input type="text" name="q" value="" />
     <input type="submit" value="search" />
  </form>

Upvotes: 2

codeling
codeling

Reputation: 11408

You should put the value of the parameter p inside a hidden form field inside the search form; something like:

<input type="hidden"
    name="p"
    value="<?php echo(htmlspecialchars($_REQUEST["p"])); ?>" />

It's not a good idea to put the parameter to the form action parameter; post requests are handled differently than GET requests, the values in a POST request aren't appended to the URL by ? and & as with GET; meaning that you wouldn't actually get the p parameter into the script handling the POST request from the form...

Also take care not to show the request parameter unreflected (hence the htmlspecialchars, thanks for the hint!), since malicious clients could try to inject code into your page (HTML injection / XSS).

Upvotes: 1

Andy
Andy

Reputation: 9058

You can use a hidden field in your form to maintain the value of the p parameter:

<input type="hidden" 
       name="p" 
       value="<?= htmlentities($_GET['p'], ENT_QUOTES) ?>" />

Upvotes: 1

Related Questions