What is the difference between the GET and POST form method except one(GET) send data from URL and post send directly ?  And if i use SSL then should i choose only post since get wont work ?
11267
What's the difference when using GET or POST method? Which one is more secure? What are (dis)advantages of each of them?  ()
39396
Why should you use theme(), rather than calling the theme functions directly?   theme('box', $title, drupal_get_form('comment_form', $edit, $title));   Why doesn't the code call the theme function directly, as in the following code?  theme_box($title, drupal_get_form('comment_form', $edit, $title));
98726
When I assign an array of data to be POSTed as a cURL option (via CURLOPT_POSTFIELDS), do I need to urlencode that data first or will that be taken care of?
7523
How do I send a cross-domain POST request via JavaScript?  Notes - it shouldn't refresh the page, and I need to grab and parse the response afterwards.
34960
Do anyone have a working REST Login on Drupal 8? This is what I tried. POST /user/login HTTP/1.1 Host: 8.d8.local Content-Type: application/x-www-form-urlencoded Accept-Encoding: http://nikhilmohan.in Cache-Control: no-cache  name=test&amp;pass=password&amp;form_id=user_login_form  It returns me HTML instead of JSON.
98448
I need to submit data to a webform.  I receive data from POST submission from mobile application ("webservices").  So I try something like :   $form_data = array(); $form_data['values']['firstname'] = $user-&gt;field_civilite['und'][0]['tid']; $form_data['values']['lastname'] = $user-&gt;field_prenom['und'][0]['value']; $form_data['values']['mail'] = $user-&gt;field_nom['und'][0]['value'];  webform_client_form_submit(226, $form_data);   But this is don't do anything.  Someone have any idea to do that?
8492
I have seen links in servers that can send you to a page in a browser, is there any way to replicate this with command blocks?  I don't mean command links, I mean web pages.
48582
Is it possible to do a HTTP Head request solely using an XMLHTTPRequest in JavaScript?  My motivation is to conserve bandwidth.  If not, is it possible to fake it?
3631
This question is somewhat related to .  But I want to know which is better? Access via properties or access via fields? What are the advantages and disadvantages of each?
18317
I'm running into a problem where a user can submit any form built by the Form API multiple times (fast clicking resulting in multiple requests).  I've put in the basic client side (javascript) solution of disabling the button, but I'm curious what the best approach to preventing this situation is on the server side.  Is there a recommended way to use Drupal's form token system to handle this?  Especially a global form solution (ie, adding a custom validator to every form using hook_form_alter()).  My approach so far has been something like this:  function mymodule_form_alter(&amp;$form, &amp;$form_state, $form_id) {   $form['#validate'][] = 'mymodule_form_validate'; }  function mymodule_form_validate(&amp;$form, &amp;$form_state){   //initialize form array   if (!isset($_SESSION['submitted_forms'])){     $_SESSION['submitted_forms'] = array();   }    $form_token = $form_state['values']['form_token'];   if ( isset($_SESSION['submitted_forms'][$form_token]) &amp;&amp; $_SESSION['submitted_forms'][$form_token] = TRUE ){     form_set_error('name]', 'This form has already been submitted');   }   else{     $_SESSION['submitted_forms'][$form_token] = TRUE;   } }   I'm running into trouble where the form_token isn't unique to the form - it seems to stay the same no matter what happens.  I'm probably misunderstanding what the token is in the grand scheme of the form api.  Any insight is appreciated!
2798
I'm looking for a library that has functionality similar to Perl's , but for PHP. Basically, it should allow me to submit HTTP GET and POST requests with a simple syntax, and then parse the resulting page and return in a simple format all forms and their fields, along with all links on the page.  I know about CURL, but it's a little too barebones, and the syntax is pretty ugly (tons of curl_foo($curl_handle, ...) statements  Clarification:  I want something more high-level than the answers so far. For example, in Perl, you could do something like:  # navigate to the main page $mech-&gt;get( 'http://www.somesite.com/' );   # follow a link that contains the text 'download this' $mech-&gt;follow_link( text_regex =&gt; qr/download this/i );  # submit a POST form, to log into the site $mech-&gt;submit_form(     with_fields      =&gt; {         username    =&gt; 'mungo',         password    =&gt; 'lost-and-alone',     } );  # save the results as a file $mech-&gt;save_content('somefile.zip');   To do the same thing using HTTP_Client or wget or CURL would be a lot of work, I'd have to manually parse the pages to find the links, find the form URL, extract all the hidden fields, and so on. The reason I'm asking for a PHP solution is that I have no experience with Perl, and I could probably build what I need with a lot of work, but it would be much quicker if I could do the above in PHP.
9579
What is the difference between HTML &lt;input type='button' /&gt; and &lt;input type='submit' /&gt;?
95962
When you post a link from Stack Exchange into the chatbox using HTTPS, the link does not onebox. However, if you change the link to HTTP, it works. See the screenshot below:    HTTPS URLs should onebox, too.
16294
Is it possible to detect, on the client side, whether the user is using an encrypted page or not?  Put another way -- I want to know if the URL of the current page starts with http or https.
63471
What do you do to pass information between forms?  Forward is straight forward (sorry) using Properties or maybe parameters in a New() or DoStuff() method, but what about sending something back when the user is done with the second form?  (IE. ID of the item selected) We have used all these:   Passed the calling form into the called form as a ref so the called form could access properties or methods on the calling form.  I really don't like this because the two forms are very dependent of each other.  Passing the calling form as a object only slightly improves this. Use Events This somewhat decouples the code, but the signatures must match on the event handler. Use an Public Interface I'm talking about the .NET built in one, but I suppose you could create your own.  This seems like the best to me.   Now raise the bar, what if the forms are in two different DLLs?  As long as the forms are not dependent on each other, I would think this wouldn't be a big step.
110957
I ajaxly call a route and pass data to it, In my controller, I want to get $_POST['var'] , $_POST['var2'], it seems because of using HttpFoundation in drupal 8, $_POST and $_GET are not exists in old method, How I can access $_POST parameters in custom Controller?
10967
I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL.  I've read plenty of security threads here, on StackOverflow, and elsewhere that goes on at length about regenerating session ids after n uses, and how your passwords need to be salted, hashed, and never stored in plain text. I've read plenty about how to detect when a session has been hijacked, by tracking IP addresses, user agents, and by using tracking cookies.  What I don't understand is what any of this matters when the website logs you in via a normal HTTP POST and sends your password over the wire in plain text?   I understand that all the other methods I listed are needed to reduce your overall exposure, and maybe there are some sites that just don't need that much security anyway, but I guess what I'm asking is:   When is it ok to not bother with SSL?   Sites like Gmail, your bank, and LinkedIn, I can see having a reason to use SSL, but what makes it ok that sites like Facebook and reddit don't bother (hell, PlentyOfFish even stores your password in plain text and even emails it to you weekly as a reminder!?!)?  How concerned should I be with making sure SSL is setup (especially since I'd be starting with a shared host, and I'm being pretty cheap to start)? My site won't hold any particularly personal information, if that helps. If the site becomes a success, I'd seriously look at paying the extra for the added security.