Contact Form Processing Products - for all your needs

FormMail • Form Encryption • Hosted Forms

ALLOW_GET_METHOD Setting

This page documents the ALLOW_GET_METHOD configuration setting in FormMail.

Type Of Setting

ALLOW_GET_METHOD is a LEAVE setting, which means...

LEAVE : you can change this setting if you really need to and know what you're doing, but we recommend that you leave this setting unchanged.

Précis

Allow forms to use the HTTP GET method.

Description

HTML forms are generally designed to use the HTTP POST method to send their field values to the server.

Some servers are not configured properly, and sometimes you might have special requirements that mean you need to use the GET method.

Prior to version 8.27, FormMail allowed both the POST and GET methods by default. However, certain security scanners falsely reported security issues by testing submissions using the GET method.

Therefore, since version 8.27, FormMail disables the GET method by default.

ALLOW_GET_METHOD configures FormMail to allow your HTML forms to use the HTTP GET method for submitting data to your server.

Default Value

From version 9 onwards:

$ALLOW_GET_METHOD = false;

Before version 9:

define("ALLOW_GET_METHOD",false);

Examples

From version 9 onwards:

$ALLOW_GET_METHOD = true;

Before version 9:

define("ALLOW_GET_METHOD",true);