HTML Form Using Values In Multiple Places

Question

I have 3 files.

1st one :

<html>
<form action="employeeDel.php" method ="post">
Enter Ssn To Delete Employee:<br>
<input type="number" name="ssnDel">
<br>
<br>
<input type="submit" value="Submit">
</form>
</html>

This form sends data to employeeDel.php.

employeeDel.php :

<html>
<form action ="employeeDelFinal.php" method="post">
<input type="hidden" name="ssn" value="ssnDel">

<?php
$ssnDel = $_POST ["ssnDel"];
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "company";
$conn = mysqli_connect ( $servername, $username, $password, $dbname );
// Check connection
if (! $conn) {
    die ( "Connection failed: " . mysqli_connect_error () );
}
$sql = "SELECT * from employee WHERE ssn=".$ssnDel;

<input type="submit" name="Delete?">
</form>
</html>

From here, when user clicks on submit button, I want html form to send ssnDel value to employeeDelFinal.php file.

employeeDelFinal.php :

<?php
$ssnDel = $_POST ["ssn"];
echo ssnDel;
?>

That value never reaches here. I got an error on employeeDel.php file, it says value of ssnDel is null. I guess in the beginning of form in employeeDel file, I create ssnDel again, so it becomes null. Is there a way to send a data from html form to employeeDel.php, from employeeDel.php to employeeDelFinal.php by using form? I tried hidden text but it didn't solve my problem as seen.

As a side note now that you have an answer, you should consider improving the code and using parameterized queries. The code above, even using mysqli_ functions, is subject to SQL injection — Alvaro Montoro
– Alvaro Montoro, Commented Mar 30, 2015 at 17:40

aleju · Accepted Answer · 2015-03-30 16:59:14Z

1

The line

<input type="hidden" name="ssn" value="ssnDel">

should be something like

<input type="hidden" name="ssn" value="<?php echo(intval($_POST['ssnDel'])); ?>">

(Assuming that ssnDel is an ID-Number.) Otherwise that hidden variable will have the string-value ssnDel, not the value of the variable $_POST['ssnDel'].
And as already mentioned, echo ssnDel; should be echo $ssnDel; and you should use less spaces (e.g. no spaces after $_POST or function names).

answered Mar 30, 2015 at 16:59

aleju

2,3861 gold badge19 silver badges10 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

berkc Over a year ago

That solved my problem. But can't we just write <?php echo($_POST['ssnDel']); ?> ? What does intval do?

aleju Over a year ago

intval() converts your string into an integer. If you don't do that, someone might put something else than an integer into your $_POST-variable (e.g. JavaScript-code), which will then be added to the source code of your website, which can lead to dangerous situations. It is good practice to never trust user input and to always sanitize it before using it anyhow.

unixmiah · Accepted Answer · 2015-03-30 16:49:08Z

1

There are couple of things I noticed. You have

employeeDelFinal.php :

<?php
$ssnDel = $_POST ["ssn"];
echo ssnDel;
?>

You don't have a dollar sign in your echo statement ssnDel.

And why do you have spaces in between $_POST ["ssnDel"] make it

$_POST["ssnDel"]

answered Mar 30, 2015 at 16:49

unixmiah

3,1691 gold badge16 silver badges27 bronze badges

Collectives™ on Stack Overflow

HTML Form Using Values In Multiple Places

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related