[thelist] ASP: help with forms and ampersand

[Warden, Matt]

> e.g. Have the ASP page write the Main form if nothing is being posted to
the page.
> Have a hidden field called "Phase" and set it to One for the Main form.
Then when the
> form is posted, look for Phase=One. Act on that by looking for the three
main fields.
> If not filled out - toss back the main form with an error message. If the
three
> fields are fine, and nothing else is filled out, dump the data in your
favorite
> storage area ( or mail it ) and show a thank you page. If you have "extra
fields"
> then show Form Two, with Phase=Two (and the three fields from the Main
form either
> hidden or pre-filled out on Form Two).  One post you'll need to look for
Phase=Two
> and act accordingly.

This is a fine approach. However, depending on the data you are collecting
from these forms, you might have to take into account that anyone can change
the values of hidden form fields (now that I think about it, they might even
be able to do it via bookmarklets... hmmm... I'll have to try that one out).
So, make sure that someone can't skip the registration process by taking out
the value of Phase or by making Phase=Three or Phase=final.

--
mattwarden
mattwarden.com