For PHP developers, HTML_QuickForm2 PEAR package provides a programmatic interface for rigorously defining form controls, value requirements, and user notifications. Using HTML_QuickForm2 helps these developers create usable and secure Web forms without sacrificing visual appeal. This solution takes much of the guesswork out of secure forms development, allowing you to create robust forms with minimal time investment.
It will show you how to take advantage of HTML_QuickForm2 to streamline the creation and validation of complex HTML forms.
Installing HTML_QuickForm2
HTML_QuickForm 2 is a PEAR package, meaning you can install it using the PEAR package installer. Presuming you’re using the original installer, execute the following command to install HTML_QuickForm2:
%>pear install –onlyreqdeps HTML_QuickForm2-alpha
When installed, you can begin programmatically creating your forms.
Creating a Form with HTML_QuickForm2
HTML_QuickForm2 is the second incarnation of the aptly-named HTML_QuickForm, rewritten from the ground up to take advantage of the object-oriented (OO) features in PHP 5. Therefore, if you’re not familiar with the OO development approach, it will take some time to get acquainted with the syntax because forms are created using a rigorous class structure.
Let’s see these examples that hopefully will help elucidate how you can use HTML_QuickForm2 is to create increasingly complex forms.
Figure-1:
Figure 1. Creating a Simple Form with HTML_QuickForm2
The form in Figure 1 can be created using approximately 25 lines of code, as shown below.
<?php require_once "HTML/QuickForm2.php"; require_once 'HTML/QuickForm2/Renderer.php'; $format = array( '' => 'Newsletter Format:', 'text' => 'Text', 'html' => 'HTML' ); $form = new HTML_QuickForm2('newsletter'); $name = $form->addText('name')->setLabel('Your Name:'); $email = $form->addText('email')->setLabel('Your E-mail Address:'); $newsletter = $form->addSelect('format', null, array('options' => $format)); $newsletter->setLabel('Preferred Newsletter Format:'); $form->addElement('submit', null, 'Submit!'); $renderer = HTML_QuickForm2_Renderer::factory('default'); echo $form->render($renderer); ?>
HTML_QuickForm2 offers a series of methods, which are responsible for creating form controls such as text fields (addText())and select boxes (addSelect()). Each of these controls is accompanied by control labels that can be added using the setLabel() method. Finally, HTML_QuickForm2 gives you the flexibility to render forms using a wide variety of approaches, including using the Smarty templating engine and an HTML_QuickForm2_Renderer object.
You can just use the default renderer as demonstrated here, passing that object to the render() method in order to output the form. Next, let’s consider the slightly more complex example depicted in Figure 2.
Figure 2. Creating a More Complex Form Variation
This time, the fieldset tag has been used to create a slightly more organized form structure. Because the form elements appear inside the fieldset boundary, you need to create these elements using the methods exposed through the fieldset object! Neglecting to do so will cause form elements to be rendered outside of the boundary. The following listing creates the form presented in Figure 2.
<?php
require_once “HTML/QuickForm2.php”;
require_once ‘HTML/QuickForm2/Renderer.php’;
$format = array(
” => ‘Newsletter Format:’,
‘text’ => ‘Text’,
‘html’ => ‘HTML’
);
$form = new HTML_QuickForm2(’newsletter’);
$fieldSet = $form->addFieldset()->setLabel(’Subscribe to the Newsletter!’);
$name = $fieldSet->addText(’name’)->setLabel(’Your Name:’);
$email = $fieldSet->addText(’email’)->setLabel(’Your E-mail Address:’);
$newsletter = $fieldSet->addSelect(’format’, null, array(’options’ => $format));
$newsletter->setLabel(’Preferred Newsletter Format:’);
$fieldSet->addElement(’submit’, null, ‘Submit!’);
$renderer = HTML_QuickForm2_Renderer::factory(’default’);
echo $form->render($renderer);
?>
Try experimenting with creating form controls using the HTML_QuickForm2 object instead of the FieldSet object in order to observe the effects of control location placement.
Validating the Form
The previous two examples demonstrated how easy it is to create and render forms using HTML_QuickForm2, but they did nothing to inspect and validate user input — not to mention informing users when the form wasn’t successfully completed. You can configure control-specific validation requirements using theaddRule() method, as shown here: $name = $form->addText(’name’)->setLabel(’Your Name:’); $name->addRule(’required’, ‘Please provide your name.’); After having added similar requirements to the other form controls, HTML_QuickForm2 will automatically adjust the rendered form to inform the user of the required fields, as depicted in Figure 3.
Figure 3. Adding Field Requirements
The required rule is just one of several supported by HTML_QuickForm2. Among others, you can control input lengths, compare the input with some predefined value, and even create your own custom rules using a callback. Consult the HTML_QuickForm2 documentation for the complete details. Even with the rules added, HTML_QuickForm2 will not actually validate the input until you explicitly call the HTML_QuickForm2 object’svalidate() method. Therefore, you’ll need to add the following code somewhere before the form is rendered:
if ($form->validate()) { echo "<p>SUCCESS!</p>"; }
Of course, in a real-world situation you’ll want to carry out more than just a simple notification; you likely will add the subscriber’s information to a database. However, if the user’s input does not meet the validation requirements, HTML_QuickForm2 will notify the user of the problem, as depicted in Figure 4.
Figure 4. Displaying Error Messages
You can easily add CSS to the form, thereby making the error messages quite evident.
HTML_QuickForm2 provides developers with the means for rigorously creating and validating forms in a manner that greatly reduces the likelihood of invalid or harmful input while simultaneously reducing the amount of time and effort needed to develop complex form layouts.
