[thelist] ASP: help with forms and ampersand

Warden, Matt mwarden at odyssey-design.com
Sat Oct 21 19:37:49 CDT 2000

> e.g. Have the ASP page write the Main form if nothing is being posted to
the page.
> Have a hidden field called "Phase" and set it to One for the Main form.
Then when the
> form is posted, look for Phase=One. Act on that by looking for the three
main fields.
> If not filled out - toss back the main form with an error message. If the
> fields are fine, and nothing else is filled out, dump the data in your
> storage area ( or mail it ) and show a thank you page. If you have "extra
> then show Form Two, with Phase=Two (and the three fields from the Main
form either
> hidden or pre-filled out on Form Two).  One post you'll need to look for
> and act accordingly.

This is a fine approach. However, depending on the data you are collecting
from these forms, you might have to take into account that anyone can change
the values of hidden form fields (now that I think about it, they might even
be able to do it via bookmarklets... hmmm... I'll have to try that one out).
So, make sure that someone can't skip the registration process by taking out
the value of Phase or by making Phase=Three or Phase=final.


More information about the thelist mailing list