[SMARTY] HTML Quickform passes values in URL
Vignesh M P N <[email protected]> Thu, 14 Dec 2006 13:19:22 -0600
| Newsgroups | gmane.comp.php.smarty.general,gmane.comp.php.pear.general |
|---|---|
| Message-ID | <002101c71fb4$c3024a30$48842fd8@vignesh> |
Hi
I have used the combination of HTML Quickform and Smarty template pretty
well. I always use the display() method of Smarty Template.
But now for a specific use, for a simple login page with username and
password fields, I have to use the fetch() method and "echo" the result
returned by the fetch() method. The user interface is working fine, but when
I submit the form, a weird thing happens. All the values of the form are
being passed through the URL, like, "<url of the php
page>?lusername=testuser&lpasswd=testme&welcomeimg.x=0&welcomeimg.y=0"
This is a serious threat as the username and password are passed through the
URL. Also the form doesn't have any POST variables on submitting the form,
though I instantiate the form this way,
$form = new HTML_QuickForm('form', 'POST', $_SERVER['PHP_SELF']);
The same form works fine if I use display() method, but I can't use the same
for some reason. I believe that technically it should work fine when I use
the combination of "fetch()" and "echo".
Please let me know what I am missing here. Sorry I didn't provide any code
fragments as they are huge.
Thanks in advance
Vignesh.