Requests and Forms

PHP parses each HTTP request into arrays before your first line runs, and everything in them is untrusted. This section builds a bookshop "add a review" form that validates, re-displays mistakes and redirects after success. Responses came from PHP 8.5.4's built-in server (php -S 127.0.0.1:8214, written $U below) via curl 3,008 . Sessions and uploads are Sessions and Uploads; CSRF and XSS, Security.

Subsections

• Superglobals
• $_GET, $_POST and $_REQUEST
• $_SERVER and Request Metadata
• Raw Request Bodies
• HTML Forms
• filter_var
• Sanitizing
• Structured Validation
• Headers and Redirects