[RESOLVED] Checking and relaying post data from a form

[jennyp]

I have a regular HTML form which must use the POST method to send its data to some remote server.

What I'd like to do - if it's possible - is to have the form instead send the POST data firstly to a script, which will capture the POSTed data, perform a validation to check the referrer, and if that's OK, to send the captured POSTed data on to the remote server which was the original destination.

It's the "relaying" of the POSTed data from the intercepting script that I don't know how to do. I thought it was possible using cURL, but I don't seem to be able to get anything to work.

[bradgrafelman]

jennyp;11000084 wrote:

I thought it was possible using cURL

It is indeed - that was going to be my suggestion.

jennyp;11000084 wrote:

I don't seem to be able to get anything to work.

Can you show us what you tried?

[jennyp]

Not sure about the cURL at all ..

$url = 'http://example.com/processor.php';
$params = array();
foreach($_POST as $key=>$value) {
$URLkey = urlencode($key);
$URLvalue = urlencode($value);
array_push($params, $URLkey.'='.$URLvalue);
}
$params = implode('&', $params);
$ch = curl_init();
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
curl_exec($ch);
curl_close($ch);

[bradgrafelman]

Sorry, forgot to revisit this thread. Here are a few things I noticed:

1. All of this code:

   $params = array(); 
   foreach($_POST as $key=>$value) { 
   $URLkey = urlencode($key); 
   $URLvalue = urlencode($value); 
   array_push($params, $URLkey.'='.$URLvalue); 
   } 
   $params = implode('&', $params); 

   is unnecessary. Simply pass in the $_POST array itself (or any other array where the keys are the field names and the values are the values for those fields) when setting the CURLOPT_POSTFIELDS option.

2. You enable CURLOPT_RETURNTRANSFER, which suggests that you don't want to directly output the entire contents of the response. Is this correct?

3. You call [man]curl_exec/man, but you never attempt to store or otherwise do anything with the value it returns. Thus, your code above is going to send a POST request and then ignore the response altogether. Is this correct?

[jennyp]

You mean just:

curl_setopt($ch, CURLOPT_POSTFIELDS,$_POST);

Wow, that's so simple.

No, I didn't want to output the response contents.

I hadn't finished with the results of the curl_exec().

Thank you for your help!