Use a PHP file as action for a form in a WordPress plugin, what's the correct way?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}
I'm developing my first "serious" WordPress plugin using Devin Vinson's plugin boiler plate generated with this generator. Now I need to use a PHP file not present in default boilerplate as action attribute value for a form. When the form is submitted and the PHP file executed I get many fatal errors of call to undefined function for every WordPress function that I call in that file...
I already read THIS and I obviously required the PHP file with require_once plugin_dir_path( dirname( __FILE__ ) ) . 'includes/ccwdpo-submit-question.php'; but I didn't solve my problem...
What's my mistake?
plugin-development forms
asked Apr 13 at 9:37
icolumbroicolumbro
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I'm developing my first "serious" WordPress plugin using Devin Vinson's plugin boiler plate generated with this generator. Now I need to use a PHP file not present in default boilerplate as action attribute value for a form. When the form is submitted and the PHP file executed I get many fatal errors of call to undefined function for every WordPress function that I call in that file...
I already read THIS and I obviously required the PHP file with require_once plugin_dir_path( dirname( __FILE__ ) ) . 'includes/ccwdpo-submit-question.php'; but I didn't solve my problem...
What's my mistake?
plugin-development forms
asked Apr 13 at 9:37
icolumbroicolumbro
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
2
Move the logic from the PHP file to the function and invoke it after sending the form.admin_post_{action}hook is what you need. Here you will find usage examples. If something is unclear, ask.
– nmr
Apr 13 at 10:16
add a comment |
I'm developing my first "serious" WordPress plugin using Devin Vinson's plugin boiler plate generated with this generator. Now I need to use a PHP file not present in default boilerplate as action attribute value for a form. When the form is submitted and the PHP file executed I get many fatal errors of call to undefined function for every WordPress function that I call in that file...
I already read THIS and I obviously required the PHP file with require_once plugin_dir_path( dirname( __FILE__ ) ) . 'includes/ccwdpo-submit-question.php'; but I didn't solve my problem...
What's my mistake?
plugin-development forms
asked Apr 13 at 9:37
icolumbroicolumbro
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I'm developing my first "serious" WordPress plugin using Devin Vinson's plugin boiler plate generated with this generator. Now I need to use a PHP file not present in default boilerplate as action attribute value for a form. When the form is submitted and the PHP file executed I get many fatal errors of call to undefined function for every WordPress function that I call in that file...
I already read THIS and I obviously required the PHP file with require_once plugin_dir_path( dirname( __FILE__ ) ) . 'includes/ccwdpo-submit-question.php'; but I didn't solve my problem...
What's my mistake?
plugin-development forms
plugin-development forms
asked Apr 13 at 9:37
icolumbroicolumbro
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 13 at 9:37
icolumbroicolumbro
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 13 at 9:37
icolumbroicolumbro
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 13 at 9:37
icolumbroicolumbro
62
asked Apr 13 at 9:37
icolumbroicolumbro
62
62
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
icolumbro is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
2
Move the logic from the PHP file to the function and invoke it after sending the form.admin_post_{action}hook is what you need. Here you will find usage examples. If something is unclear, ask.
– nmr
Apr 13 at 10:16
add a comment |
2
Move the logic from the PHP file to the function and invoke it after sending the form.admin_post_{action}hook is what you need. Here you will find usage examples. If something is unclear, ask.
– nmr
Apr 13 at 10:16
2
2
Move the logic from the PHP file to the function and invoke it after sending the form.
admin_post_{action} hook is what you need. Here you will find usage examples. If something is unclear, ask.– nmr
Apr 13 at 10:16
Move the logic from the PHP file to the function and invoke it after sending the form.
admin_post_{action} hook is what you need. Here you will find usage examples. If something is unclear, ask.– nmr
Apr 13 at 10:16
add a comment |
1 Answer
1
active
oldest
votes
To be honest, you should never use a PHP file as action attribute for a form in WordPress. WordPress already has API for this and you should use this instead. Why? Because it's always better if your app/site has only one entry point (or as few as possible).
And it's always a bad idea to direct any PHP requests directly to wp-content directory - such requests are very often blocked for security reasons.
So how to do this properly?
Use admin-post instead.
So in your form change this:
<form action="<SOME FILE>" ...
to this:
<form action="<?php echo esc_attr( admin_url( 'admin-post.php' ) ); ?>" ...
<input type="hidden" name="action" value="myform" />
And later in your plugin, you have to register your actions callbacks:
add_action( 'admin_post_myform', 'prefix_admin_myform_callback' );
add_action( 'admin_post_nopriv_myform', 'prefix_admin_myform_callback' );
function prefix_admin_myform_callback() {
status_header(200);
die("Server received '{$_REQUEST['data']}' from your browser.");
//request handlers should die() when they complete their task
}
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -admin_post_{action}
– Krzysiek Dróżdż♦
Apr 13 at 10:28
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
1
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "110"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
icolumbro is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fwordpress.stackexchange.com%2fquestions%2f334284%2fuse-a-php-file-as-action-for-a-form-in-a-wordpress-plugin-whats-the-correct-wa%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
To be honest, you should never use a PHP file as action attribute for a form in WordPress. WordPress already has API for this and you should use this instead. Why? Because it's always better if your app/site has only one entry point (or as few as possible).
And it's always a bad idea to direct any PHP requests directly to wp-content directory - such requests are very often blocked for security reasons.
So how to do this properly?
Use admin-post instead.
So in your form change this:
<form action="<SOME FILE>" ...
to this:
<form action="<?php echo esc_attr( admin_url( 'admin-post.php' ) ); ?>" ...
<input type="hidden" name="action" value="myform" />
And later in your plugin, you have to register your actions callbacks:
add_action( 'admin_post_myform', 'prefix_admin_myform_callback' );
add_action( 'admin_post_nopriv_myform', 'prefix_admin_myform_callback' );
function prefix_admin_myform_callback() {
status_header(200);
die("Server received '{$_REQUEST['data']}' from your browser.");
//request handlers should die() when they complete their task
}
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -admin_post_{action}
– Krzysiek Dróżdż♦
Apr 13 at 10:28
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
1
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
add a comment |
To be honest, you should never use a PHP file as action attribute for a form in WordPress. WordPress already has API for this and you should use this instead. Why? Because it's always better if your app/site has only one entry point (or as few as possible).
And it's always a bad idea to direct any PHP requests directly to wp-content directory - such requests are very often blocked for security reasons.
So how to do this properly?
Use admin-post instead.
So in your form change this:
<form action="<SOME FILE>" ...
to this:
<form action="<?php echo esc_attr( admin_url( 'admin-post.php' ) ); ?>" ...
<input type="hidden" name="action" value="myform" />
And later in your plugin, you have to register your actions callbacks:
add_action( 'admin_post_myform', 'prefix_admin_myform_callback' );
add_action( 'admin_post_nopriv_myform', 'prefix_admin_myform_callback' );
function prefix_admin_myform_callback() {
status_header(200);
die("Server received '{$_REQUEST['data']}' from your browser.");
//request handlers should die() when they complete their task
}
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -admin_post_{action}
– Krzysiek Dróżdż♦
Apr 13 at 10:28
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
1
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
add a comment |
To be honest, you should never use a PHP file as action attribute for a form in WordPress. WordPress already has API for this and you should use this instead. Why? Because it's always better if your app/site has only one entry point (or as few as possible).
And it's always a bad idea to direct any PHP requests directly to wp-content directory - such requests are very often blocked for security reasons.
So how to do this properly?
Use admin-post instead.
So in your form change this:
<form action="<SOME FILE>" ...
to this:
<form action="<?php echo esc_attr( admin_url( 'admin-post.php' ) ); ?>" ...
<input type="hidden" name="action" value="myform" />
And later in your plugin, you have to register your actions callbacks:
add_action( 'admin_post_myform', 'prefix_admin_myform_callback' );
add_action( 'admin_post_nopriv_myform', 'prefix_admin_myform_callback' );
function prefix_admin_myform_callback() {
status_header(200);
die("Server received '{$_REQUEST['data']}' from your browser.");
//request handlers should die() when they complete their task
}
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
To be honest, you should never use a PHP file as action attribute for a form in WordPress. WordPress already has API for this and you should use this instead. Why? Because it's always better if your app/site has only one entry point (or as few as possible).
And it's always a bad idea to direct any PHP requests directly to wp-content directory - such requests are very often blocked for security reasons.
So how to do this properly?
Use admin-post instead.
So in your form change this:
<form action="<SOME FILE>" ...
to this:
<form action="<?php echo esc_attr( admin_url( 'admin-post.php' ) ); ?>" ...
<input type="hidden" name="action" value="myform" />
And later in your plugin, you have to register your actions callbacks:
add_action( 'admin_post_myform', 'prefix_admin_myform_callback' );
add_action( 'admin_post_nopriv_myform', 'prefix_admin_myform_callback' );
function prefix_admin_myform_callback() {
status_header(200);
die("Server received '{$_REQUEST['data']}' from your browser.");
//request handlers should die() when they complete their task
}
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
edited Apr 13 at 10:59
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
answered Apr 13 at 10:15
Krzysiek Dróżdż♦Krzysiek Dróżdż
18.6k73349
18.6k73349
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -admin_post_{action}
– Krzysiek Dróżdż♦
Apr 13 at 10:28
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
1
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
add a comment |
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -admin_post_{action}
– Krzysiek Dróżdż♦
Apr 13 at 10:28
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
1
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
Thank you, I'll try soon your solution but I have a doubt: what means "action"="myform" in hidden input field?
– icolumbro
Apr 13 at 10:26
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -
admin_post_{action}– Krzysiek Dróżdż♦
Apr 13 at 10:28
It tells WP, which action should it run to process this request. The "myform" part is then used to register your callbacks -
admin_post_{action}– Krzysiek Dróżdż♦
Apr 13 at 10:28
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
Yeah, I understand but is it correct to use "action" with double quotes as a name for a "not-standard" attribute?
– icolumbro
Apr 13 at 10:58
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
@icolumbro Aaaa... Sorry for that, it's just a typo - this happens when you write answer on mobile. I've already fixed this - sorry again :)
– Krzysiek Dróżdż♦
Apr 13 at 11:00
1
1
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
I figured it is a typo even reading the codex page but I preferred to ask you to be sure, thank you, now I try!
– icolumbro
Apr 13 at 11:10
add a comment |
icolumbro is a new contributor. Be nice, and check out our Code of Conduct.
icolumbro is a new contributor. Be nice, and check out our Code of Conduct.
icolumbro is a new contributor. Be nice, and check out our Code of Conduct.
icolumbro is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to WordPress Development Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fwordpress.stackexchange.com%2fquestions%2f334284%2fuse-a-php-file-as-action-for-a-form-in-a-wordpress-plugin-whats-the-correct-wa%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
2
Move the logic from the PHP file to the function and invoke it after sending the form.
admin_post_{action}hook is what you need. Here you will find usage examples. If something is unclear, ask.– nmr
Apr 13 at 10:16