stop form action from going to page if search field is empty

I have a search field in a form that looks like this on my index.php page.

 <form action="search.php" method="post">

Open in new window

The search function is working fine but I don't want the page to actually go to search.php if the search field is empty i.e.: they just click "search" without actually inputting anything.

I tried this above the form:

 $error = "";
		  
		  if($_SERVER['REQUEST_METHOD'] == "POST"){
			  
			  if (empty($_POST['search'])){
				  
				  $error .="Please enter a search term";
				  
			  } 
		  }

Open in new window

But it still posts the search.php page and shows the error there. Is it possible to stop the page from redirecting to search.php if the search input is empty?

Black Sulfur

Asked: 2016-09-08

Advertise Here

1 Solution

LVL 111

Ray PaseurCommented: 2016-09-08

Yes, it's possible, but this is not a PHP question. You use JavaScript to influence behaviors in the client browser. You might try using the "required" attribute in the search field.
http://www.w3schools.com/tags/att_input_required.asp

LVL 111

Ray PaseurCommented: 2016-09-08

Also, you might rethink the use of a POST request for a search. If you use GET instead of POST, your clients can bookmark the page, they can share the link with others, etc. The search parameters are in the URL. It's just a much more user-friendly way to work the issue.

LVL 1

Black SulfurAuthor Commented: 2016-09-08

Thanks Ray. But "required" doesn't work with safari, I need something that does.

LVL 84

Dave BaldwinFixer of ProblemsCommented: 2016-09-08

I use POST for my search functions and filter the values like crazy. A 'Search' form is a Big target for spammers. Too often the 'users' aren't 'user friendly'.

LVL 84

Dave BaldwinFixer of ProblemsCommented: 2016-09-08

You have to do it twice in any case. Use Javascript in the browser and PHP on the server. Remember that spammers will bypass your form and send directly to your 'action' page.

LVL 111

Ray PaseurCommented: 2016-09-08

Try this. I don't have an instance of Safari to test, but it seems like it should work.
http://www.html5rocks.com/en/tutorials/forms/constraintvalidation/#toc-safari

Also, whether the request is GET or POST, all external input (GET, POST, COOKIES, Daatabase, etc) is by definition tainted and therefore must be considered an attack vector. Always filter everything!

LVL 1

Black SulfurAuthor Commented: 2016-09-08

Works like a charm!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Expand your skills with this month's free Premium course.

stop form action from going to page if search field is empty

Join & Write a Comment Already a member? Login.

Featured Post