PHP form action directing url

Question

I have a form in one file "signin.php", and then all my backend is in "php/signin_back.php"

If i have a form

<form action="php/signin_back.php" method="post">

<input type="text"/>
<!-- more stuff !-->

</form>

When I log in, the form directs to php/signin_back.php to process all the good stuff, but it kind of lags so it goes to that page for like 1 second, meaning I'm able to read the url site. Whats a better way to do it so the user logging in doesn't see any URL backend information... Would it be better if I have all my backend mysql database stuff in the same file as my form?

Thanks

I usually have all the form stuff in the 1 file, then on success redirect to another page. — bumperbox
– bumperbox, Commented Oct 13, 2012 at 1:18

inzenir · Accepted Answer · 2012-10-13 01:24:10Z

1

<?php

if(isset($_POST) && !empty($_POST))
{
    /* process stuff here */
}

?>

<!--
    old page here
-->

how about something like this?

answered Oct 13, 2012 at 1:24

inzenir

1165 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

bumperbox Over a year ago

The empty test duplicates the isset test, just do if(!empty($_POST)).

Todd Horst · Accepted Answer · 2012-10-13 01:19:19Z

0

you can put it in the same file, or in your destination file.

or use jquery and post the info using ajax

answered Oct 13, 2012 at 1:19

Todd Horst

87310 silver badges23 bronze badges

Comments

BudwiseЯ · Accepted Answer · 2012-10-13 02:05:39Z

0

If I understand you correctly, you're worried about user being able to see the url of the page processing the sign in because of security related reasons. This is a wrong approach.

Passing user to one page and then immediately redirecting to another page in a hope that all of this would happen so fast the user wouldn't be able to read the url is not a safety measure.

Simply, your job is to secure your script in a way, that it doesn't matter whether the user is able to see the url or not. They're able to see it anyway if they care to dig your source.

answered Oct 13, 2012 at 2:05

BudwiseЯ

1,8262 gold badges16 silver badges28 bronze badges

Comments

Coldstar · Accepted Answer · 2012-10-13 03:37:44Z

0

Post to the same page but use an included controller to process the $_POST if a post exists

answered Oct 13, 2012 at 3:37

Coldstar

1,3511 gold badge12 silver badges33 bronze badges

Collectives™ on Stack Overflow

PHP form action directing url

4 Answers 4

1 Comment

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

1 Comment

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related