From Wikipedia, the free encyclopedia

A webform on a web page allows a user to enter data that is, typically, sent to a server for processing and to mimic the usage of paper forms. Forms can be used to submit data to save on a server (e.g., ordering a product) or can be used to retrieve data (e.g., searching on a search engine).

Contents 1 XHTML/HTML forms 2 Combined with programs 2.1 Client-side 2.2 Server-side 2.2.1 PHP 2.2.2 Perl 2.2.3 Form-to-email scripts 3 XForms 4 External links

A form in XHTML or HTML is by far the most common way to use a form online.

The following elements can make up the user-inputting portion of a form:

• input field
  • text – a simple text box that allows input of a single line of text
  • checkbox – a check box
  • radio – a radio button
  • file – a file select control for uploading a file
  • reset – a reset button that, when activated, tells the browser to restore the values to their initial values.
  • submit – a button that tells the browser to take action on the form (typically to send it to a server)
• textarea – much like the text input field except a textarea allows for multiple rows of data to be shown and entered
• select – a drop-down list that displays a list of items a user can select from

The sample image on the right shows all of these elements:

• a text box asking for your name
• a pair of radio buttons asking you to pick your sex
• a select box giving you a list of eye colors to choose from
• a pair of check boxes to click on if they apply to you
• a text area to describe your athletic ability
• a submit button to send it to the server

These basic elements provide most possible graphical user interface (GUI) elements, but not all. For example, there are no equivalents to a combutcon, combo box, balloon help, tree view, or grid view. A grid view, however, can be mimicked by using a standard HTML table with each cell containing a text input element. A tree view could also be mimicked through nested tables or, more semantically appropriately, nested lists. Many of these are available through JavaScript libraries.

Forms can be combined with various scripting languages to allow developers to create dynamic web sites. This includes both client-side and/or server-side languages.

The de facto standard client-side scripting language for web sites is JavaScript. Utilizing JavaScript on the Document Object Model (DOM) leads to the method of Dynamic HTML that allows dynamic creation and modification of a web page within the browser.

While client-side languages used in conjunction with forms are limited, they often can serve to do pre-validation of the form data and/or to prepare the form data to send to a server-side program.

Server-side programs can do a vast assortment of tasks to create dynamic web sites — from authenticating a login through, for example, Lightweight Directory Access Protocol to retrieving and storing data in a database to spell checking to sending e-mail — quite unlike client-side programs. Most server-side program requests must pass through the web server's Common Gateway Interface to execute the program to actually perform the tasks.

The advantage of server-side over client-side is the concentration of functionality onto one computer (the server) instead of relying on each web browser implementing all of the various functions the same. This very problem is quite evident to any developer who writes JavaScript code for multiple browsers.

Scripting languages are the most common server-side programs used for web sites, but it is also possible to run compiled programs.

Some of the scripting languages commonly used:

• PHP
• Perl
• ASP
• ColdFusion

Some of the compiling languages commonly used:

• C
• Java

PHP is one very common language used for server-side languages used and is one of the few languages created specifically for server-side programs.

A PHP script may:

• display the information on another page (ex: asking for a user's name and then displaying it on the web page)
• act as a log on interface
• post the data to a database (ex: mySQL, an ASCII file, etc.)
• store the information on the viewer's computer in an HTTP cookie
• generate an e-mail, either using the data or including said data in the e-mail's contents (possibly as an e-mail attachment)

The HTML form learns where to pass the data from the action attribute of the form's HTML element. The target PHP file then retrieves the data either through POST or GET (see HTTP for more information), depending on the programmer's preference. Here is a basic form handler PHP script that will post the form's contents, in this case "user", to the page using GET:

form.html

 

   User Name: 
   
 

form_handler.php

in the above script we can use print also insteaded of echo and the $_GET[] and $_POST[] is used but $_REQUEST[] is used for both so it is batter then it

Perl is another language often used for web development. Perl scripts are traditionally used as Common Gateway Interface applications (CGIs) toward that end. In fact, Perl is such a common way to write CGIs that the two are often confused. CGIs may be written in other languages than Perl (compatibility with multiple languages is a design goal of the CGI protocol) and there are other ways to make Perl scripts interoperate with a web server than using CGI (such as FastCGI or Apache's mod perl).

Perl CGIs were once a very common way to write web applications. But not being specifically designed for web development, Perl is now often viewed as less practical (both for developers and users) than specialized languages like PHP or ASP for that purpose, especially if Perl modules (some common ones being written in C) would need to be installed on the web host or if wanting to use a non-CGI environment that might require extra configurations on the web server. Some web hosts also rely on interpreter-level sandboxing, which while possibly doable with the Safe module, wouldn't be very practical and undoubtly break a lot of scripts considering common practices. Similar considerations might apply to other general-purpose scripting languages like Python or Ruby. For these reasons, a lot of cheap web hosts nowadays effectively only support PHP and web developers often seek compatibility with them.

A modern Perl 5 CGI using the standard CGI module with a form similar to the one above might look like:

form_handler.pl

#!/usr/bin/perl
use CGI qw(:standard);

$user = param('user');
print header;
print html(
  body(
    p("Hello, $user!"),
  ),
);

Among the simplest and most commonly needed types of server-side script is that which simply emails the contents of a submitted form. This kind of script is frequently exploited by spammer, however, and many of the most popular form-to-email scripts in use are vulnernable to be hijacked for spamming purposes. One of the most popular scripts of this type was "FormMail.pl" made by Matt's Script Archive. Today, no version of this still frequently used script is considered secure.

More recent and secure scripts for emailing submitted forms include Jack's FormMail.php and nms formmail. In addition, remote hosting of form to email scripts by secure servers is an increasingly popular alternative. Remotely hosted form processing services such as EmailMeForm, FormBreeze and Mail My Form.com can offer many additional features (such as CAPTCHA systems) as well as security from hackers and spammers.

Further information: XForms

• Forms in HTML documents, the W3C's spec page for forms in HTML 4.
• Remotely hosted form processing systems