Module 19 Notes

Study Notes: Form Handling and Input Validation

1. GET vs POST Processing Methods

• GET Method: Appends form parameters visible inside the browser URL search string. Best for search bars and filters. Should never be used for sensitive secrets.
• POST Method: Embeds parameters inside the HTTP request body. Invisible to users in URLs. Best for registration forms, passwords, and data inserts.

2. Sessions and Cookies

HTTP is stateless. To identify a user across clicks, PHP starts a session (saving a session token on the client cookie and server memory).

3. Forms Validating & Session Start Template

<?php
// Initialize session memory
session_start();

// Check if form POST request is triggered
if ($_SERVER["REQUEST_METHOD"] === "POST") {
    $email = isset($_POST["email"]) ? trim($_POST["email"]) : "";
    $password = isset($_POST["password"]) ? $_POST["password"] : "";
    
    // Basic sanitizing validations
    if (filter_var($email, FILTER_VALIDATE_EMAIL)) {
        // Save authenticated session token
        $_SESSION["authenticated_user"] = $email;
        header("Location: dashboard.php");
        exit;
    } else {
        $errorMessage = "Invalid email format entered.";
    }
}
?>

Expected University & Placement Questions

• Q1: Outline how this module applies to modern production web design workflows.
  Answer: This topic forms a crucial layer of web architecture (structure, utility styling, logic control, package loading, or data persistence), enabling reliable, scalable web application engineering.
• Q2: How do you verify and debug syntax errors in this framework?
  Answer: Use browser developer consoles to review JavaScript alerts, run terminal linter commands on backend scripts, and verify data transfers in network panels.