PHP Email with Javascript validation

[Sabin_33]

I have a form validated by javascript with a php script to send an e-mail.
Right now though it will bypass my validation and send the e-mail.

My Question:
Can I validate a form with javascript then execute a php script?

Let me know what code you would like to see.

[ukgeoff]

ALWAYS validate with both JavaScript and at the server with PHP incase JavaScript is turned off.

Your form needs an onsubmit() function to do a JavaScript validation. Only if that passes will the form be submitted for PHP processing where it is validated again.

You need to have what is known as 'sticky data' in your form fields so that if the PHP validation fails, the form is redisplayed to the user with the data previously emtered intact.

[Sabin_33]

this is what I have and it is not working :

Code: Select all

<form name="AForm" runat="server" onsubmit="return VerifyForm(AForm)" method="get" enctype="text/html">
    &nbsp;
    <div id="MainForm" style="width: 552px; height: 384px; left: 0px; position: relative; top: -22px; text-align: center;">
   My Electronical Approval Request<br />
    For Invoice
    <br />
    See attachment for details<br />
<br />
<input visible=false name="subject" id="subject" value="Nothing" type="hidden" style="width: 32px"/>
<input id="Radio1" type="radio" name="WhatAction"/>
Approve Invoice<br />
<input id="Radio2" type="radio" name="WhatAction"/>
Decline Invoice<br />
<br />
Comments :<br />
<textarea id="TextArea1" name="body" style="width: 304px; height: 152px"></textarea><br />
<br />
<input id="Submit1" type="submit" value="submit" onclick="http://www.mysite.com/sendmymail.php" /><br />
    *After you click submit this will send an automatic response to here<br />
    *Any questions or comments reply to <a href="mailto:MyMail@somewhere.com?subject=My%20Electronic%20Approval">Our IT Department</a></div>
    &nbsp; &nbsp;
    <a href="mailto:MyMail@somewhere.com?subject=My%20Electronic%20Approval"></a>
</form>

[Sabin_33]

Does using 'GET' or 'POST' matter?

[ukgeoff]

GET data is passed as part of the URL so can be seen in the browsers address bar.

POST data is passed 'unseen' to be processed and is generally considered the more secure option. I would always recommend sending form data using POST.