PHP was designed for making interactive web pages and mixing functionality with HTML. Form handling in PHP is quite a simple process. Here is a step-by-step guide for creating a simple feedback form. A visitor to your website fills this out and the information is emailed to you.<\/p>\n
First we need to create a simple HTML form, to start with we’ll keep the form simple by just asking for the users email address and comments. Here is our HTML form:<\/p>\n
<html>\n<head>\n<title>Simple Feedback Form<\/title>\n<style>label{display:block;}<\/style>\n<\/head>\n<body>\n\n<form action=\"\/feedback_form.php\" method=\"post\">\n\n<label>Email Address<\/label>\n<input type=\"text\" name=\"email_address\" size=\"40\">\n\n<label>Your Feedback<\/label>\n<textarea name=\"feedback\" cols=\"50\" rows=\"10\"><\/textarea>\n\n<input type=\"submit\" name=\"send\" value=\"Submit\">\n\n<\/form>\n\n<\/body>\n<\/html><\/pre>\nThis form will send two parameters to our PHP script, email_address<\/i> and feedback<\/i>. Save this file as feedback_form.html<\/i> and upload it to the web folder on your hosting.<\/p>\nCreate the form script<\/h3>\n
First we receive the data from our form and store it in two PHP variables, $email_address<\/i> and $feedback<\/i>.<\/p>\n<?php\n$email_address = $_POST['email_address'];\n$feedback = $_POST['feedback'];<\/pre>\nFiltering user submitted data<\/h3>\n
Whenever you write a PHP script that receives data from an unknown source you should always filter the data to make sure it doesn’t contain anything harmful. For example, if we don’t filter the data in our form it would be quite easy for a Hacker to use our PHP script to send out spam to thousands of people. The golden rule is never trust any data you haven’t created or don’t control.<\/p>\n
To filter our user data we’re going to create a functions:<\/p>\n
function filter_email_header($form_field) { \nreturn preg_replace('\/[nr|!\/<>^$%*&]+\/','',$form_field);\n}<\/pre>\nThe filter function removes special characters which could be used to trick our script into sending spam and is applied to the $email_address data. We’ll place the two functions at the bottom of our script.<\/p>\n
Now we’ll call the filter function to clean up our user submitted email address:<\/p>\n
$email_address = filter_email_header($email_address);<\/pre>\nEmailing the feedback<\/h3>\n
Once we have the filtered data we need to email it back to you. Our web hosting servers run a local mail server that a PHP script can use to send email. This can be done using the PHP in-built mail function:<\/p>\n
$headers = \"From: $email_addressn\";\n$sent = mail('you@domain.com', 'Feedback Form Submission', $feedback, $headers);<\/pre>\nMake sure you set your email address on line 2.<\/p>\n
Thank the user for their feedback<\/h3>\n
Finally, when a user submits your form lets show a page thanking them for their feedback:<\/p>\n
if ($sent) {\n\n?><html>\n<head>\n<title>Thank You<\/title>\n<\/head>\n<body>\n<h1>Thank You<\/h1>\n<p>Thank you for your feedback.<\/p>\n<\/body>\n<\/html>\n\n<?php\n\n} else {\n?><html>\n<head>\n<title>Something went wrong<\/title>\n<\/head>\n<body>\n<h1>Something went wrong<\/h1>\n<p>We could not send your feedback. Please try again.<\/p>\n<\/body>\n<\/html>\n<?php\n}\n?><\/pre>\nThe final script<\/h3>\n
This example script shows a very basic way to get form contents emailed to you, it doesn’t however have the refinements of a professional script, e.g. input validation. Below is the finished script. We’ve added some comments (lines beginning with #) to help make it clearer.<\/p>\n
<?php\n\n#Receive user input\n$email_address = $_POST['email_address'];\n$feedback = $_POST['feedback'];\n\n#Filter user input\nfunction filter_email_header($form_field) { \nreturn preg_replace('\/[nr|!\/<>^$%*&]+\/','',$form_field);\n}\n\n$email_address = filter_email_header($email_address);\n\n#Send email\n$headers = \"From: $email_addressn\";\n$sent = mail('you@domain.com', 'Feedback Form Submission', $feedback, $headers);\n\n#Thank user or notify them of a problem\nif ($sent) {\n\n?><html>\n<head>\n<title>Thank You<\/title>\n<\/head>\n<body>\n<h1>Thank You<\/h1>\n<p>Thank you for your feedback.<\/p>\n<\/body>\n<\/html>\n<?php\n\n} else {\n\n?><html>\n<head>\n<title>Something went wrong<\/title>\n<\/head>\n<body>\n<h1>Something went wrong<\/h1>\n<p>We could not send your feedback. Please try again.<\/p>\n<\/body>\n<\/html>\n<?php\n}\n?><\/pre>\nSave this script as feedback_form.php<\/i> and upload it to the root of your web hosting on your web hosting.<\/p>\n