Retrieve a named POST variable value, or all POST variables
Always sanitize (and validate where appropriate) any values from user input.
The following optional features are available in ProcessWire version 3.0.125 and newer:
- Provide a sanitization method as the 2nd argument to include sanitization.
- Provide an array of valid values as the 2nd argument to limit input to those values.
- Provide a callback function that receives the value and returns a validated value.
- Provide a fallback value as the 3rd argument to use if value not present or invalid.
- Append “[]” to the 1st argument to always force return value to be an array, i.e “colors[]”.
Note that the $valid and $fallback arguments are only applicable if a $key argument is provided.
Example
// Retrieve a "comments" POST variable, sanitize and output it
$comments = $input->post('comments');
$comments = $sanitizer->textarea($comments); // sanitize input as multi-line text with no HTML
echo $sanitizer->entities($comments); // sanitize for output
// You can also combine $input and one $sanitizer call like this,
// replacing "text" with name of any $sanitizer method:
$comments = $input->post->textarea('comments');
// like the previous example, but specify sanitizer method as second argument (3.0.125+):
$comments = $input->post('comments', 'textarea');
// if you want more than one sanitizer, specify multiple in a CSV string (3.0.125+):
$comments = $input->post('comments', 'textarea,entities');
// you can provide a whitelist array of allowed values instead of a sanitizer method (3.0.125+):
$color = $input->post('color', [ 'red', 'blue', 'green' ]);
// an optional 3rd argument lets you specify a fallback value to use if valid value not present or
// empty in input, and it will return this value rather than null/empty (3.0.125+):
$qty = $input->post('qty', 'int', 1); // return 1 if no qty provided
$color = $input->post('color', [ 'red', 'blue', 'green' ], 'red'); // return red if no color selected
// you may optionally provide a callback function to sanitize/validate with (3.0.125+):
$isActive = $input->post('active', function($val) { return $val ? true : false; }); Usage
// basic usage
$mixed = $input->post();
// usage with all arguments
$mixed = $input->post(string $key = '', $valid = null, $fallback = null);Arguments
| Name | Type(s) | Description |
|---|---|---|
key (optional) | string | Name of POST variable you want to retrieve.
|
valid (optional) | array, string, int, callable, null | Omit for no validation/sanitization, or provide one of the following:
|
fallback (optional) |
Return value
null mixed WireInputDataReturns one of the following:
- If given no
$keyargument, returnsWireInputDatawith all unsanitized POST vars. - If given no
$validargument, returns unsanitized value or NULL if not present. - If given a Sanitizer name for
$validargument, returns value sanitized with that Sanitizer method (3.0.125+). - If given an array of allowed values for
$validargument, returns value from that array if it was in the input, or null if not (3.0.125+). - If given a callable function for
$validargument, returns the value returned by that function (3.0.125+). - If given a
$fallbackargument, returns that value when it would otherwise return null (3.0.125+).
Exceptions
Method can throw exceptions on error:
WireException- if given unknown Sanitizer method for $valid argument
API reference based on ProcessWire core version 3.0.236