Forwarding an HTTP POST

evan

Hello All! (this is my first post here!)

Heres the situation I'm in:

I'm using PHP to do validation on a form. So the form posts back to itself, and the php in the page checks the input and renders the form showing the errors. However if the validation check is successful, I need to send the user to a page on someone else's server as if the form posted directly to that page.

So the question is, how can I take all the POST data and send it on as another POST after validation has passed?

Thanks!

Evan

stolzyboy

well once you get into that area, i would grab all the vars and put them in to hidden fields in another form, then you can use javascript to autosubmit the form, the following code will submit the form named submissionform after 5 seconds, you can change the time as you want, 1 second is represented by 1000

evan

ah, good thought!

i had myself locked into thinking php!

javascript can be useful!

Thanks!
Evan

PyroX

Javascript is a crappy choice, as many a user will have it disabled, and then what?

Look into using cURL, that is what I use.

evan

Yikes.. having troubles with this.. If anyone could grant me a minute of debugging, this is the function that's being called to forward on the post.. I'm getting an "Object doesn't suppose this property or method" error on the document.form.submit() line.
Thoughts?

function SubmitToVerisign()
{
	echo 'hehe. i hiding';
	echo '<form action="http://staging.mindreef.com/sandbox/sendToHostRec.php" method="post" name="form">';

while(list($key, $val) = each($_POST))
{
	$val = htmlspecialchars($val);
	echo "<input type='hidden' name='$key' value='$value'>";
}

echo '</form>';
echo '<SCRIPT LANGUAGE="JavaScript"><!-- 
document.form.submit();
//--></SCRIPT>';
}

evan

Originally posted by PyroX
Javascript is a crappy choice, as many a user will have it disabled, and then what?

Look into using cURL, that is what I use.

oy. that reminds me. the reason i'm doing php validation is to avoid the case where people have it disabled. so to add js now would invalidate the usefulness of the php validation too.

hmm. i'll look into cURL. thanks.

Evan

evan

Originally posted by PyroX
Javascript is a crappy choice, as many a user will have it disabled, and then what?

Look into using cURL, that is what I use.

Do you have a bit of example code using cURL that i could look at?

evan

tom77

There are 2 reason why I think you want to do this...

1) The other page requires a POST
2) you want to hide the data.

I have pondered on this before. If I understand you correcly the cURL solution is nor right for this. This would be okay if you wanted to just send dome details off someplace else but if you want to take the user to th page, I don't think its want you want.

Javascript maybe the best (easiest option, if they don't have Javascript ( I know foks disable it because they dont trust others, but I dont trust people who disable it) they just have to submit again.

If the issue is hiding the post from the address bar, be carefull you aren't relying upon it for security, because often POSTED data can be falsified anyway.

If the page you were submitting to was your own, you could create a tempory database record.

I probly dont have to mention that if you wanted to post the data off again using GET, use header("Location: {$url}");die;

maybe even a touch of:

unset ($stuff);
foreach($HTTP_POST_VARS as $key => $value) {
if ($stuff) {
$stuff.='&';
}
else {
$stuff.='?';
}
$stuff.="{$key}=".urlencode($value);
}
header("Location: {$url}{$stuff}");

I've used the above plenty of times for things like logging formmail submissions, but I could really do with working something similar using POST to POST for things like credit card payment details intermin pages.

It must be possible, I did work it out to a certain extent using ncat tools but ran into limitaions with sending headers in using PHP. Perhaps cURL might help(??).

evan

thanks for the thorough reply-

you're right on about the use for this. i'm trying to do an order page for a product and the send the user to the page, hosted elsewhere, to put in there credit card information. I can ask the card processing company if they'll accept a GET submission, but if not it seems i'm out of luck.

if anyone runs across anything please let me know-

thanks again all!

Evan

PyroX

Let me put it to you this way, if your credit card processing company will accept a get mode submit, then you need a new CC card processing ciompany.

Here you go, the legendary post to https cURL code:

<?
$ch = curl_init();
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,0);
curl_setopt ($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt ($ch, CURLOPT_URL, "https://www.test.com/my.php");
curl_setopt ($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "var=val&var2=val");
$output=curl_exec($ch);
curl_close ($ch);
echo "<PRE>".htmlentities($output)."</PRE>";
?>

Enjoy!

P.S. - IF ANYONE COPIES AND PASTES THIS CODE INTO THEIR APP, PLEASE GIVE REFERENCE TO www.pyroxpro.com