POST logic in PHP

janet287

Hi,

I've got the following piece of code below, which is working like a GET function in HTML where it posts the variable ID at the end of my URL when I access the link created by the logic. But, I need to make it work like HTML POST logic where the variable ID is passed but doesn't appear at the end of the URL. Having the ID at the end of the URL is not secure enough for my users.

Can anyone help me translate the logic below to work more like POST?

Thanks!

$this->content->items[] = '<a ' . $linkcss . $target . ' href="https://reportserver?/reportname&id=' . $COURSE->id . '">Student Responses</a>';
return $this->content;

laserlight

But, I need to make it work like HTML POST logic where the variable ID is passed but doesn't appear at the end of the URL.

In that case you should be using a form, not a link.

Having the ID at the end of the URL is not secure enough for my users.

Having the ID passed via the POST method is ultimately as secure as having it passed via the GET method. The difference is that if it is passed via the query string, it is just easier for the average user to manipulate.

janet287

Ok. I am sorry but I am still learning PHP. What do you mean by a form?

laserlight

What do you mean by a form?

Like the one you used to post on this forum 😉

This is actually in the realm of HTML.

janet287

Hi,
Unfortunately I can't use a form. I need to logic to pull the course Id out of the database using PHP and then send it over to the report server.

I recognize that POST isn't super secure either, but it would be better than the way I have it now.

Is there a way to re-write the PHP to send the variable to the page without displaying it in the URL?

Thanks.

laserlight

Unfortunately I can't use a form. I need to logic to pull the course Id out of the database using PHP and then send it over to the report server.

hmm... then why are you displaying a link to the user?

Is there a way to re-write the PHP to send the variable to the page without displaying it in the URL?

Curl may come in handy.

laserlight

quote]Unfortunately I can't use a form. I need to logic to pull the course Id out of the database using PHP and then send it over to the report server.[/quote]
hmm... then why are you displaying the link to the user?

Is there a way to re-write the PHP to send the variable to the page without displaying it in the URL?

Curl may come in handy.