PHP GET方法空间错误

Question

<?php 

$current_subject = $_GET['subject_id']; 
$current_content = $_GET['note_id']; 

echo "<form method=\"post\" action=mainpage.php?subject_id=".$current_subject."&note_id=".$current_content.">"; 

?> 
    <input type='text' name='list_item' value=''> 
    <input type='submit' name="new_item" value="New Item"> 
</form> 

问题是，当GET变量之一是两个单词链接不会这样写。因此，举例来说，如果$current_subject="Advanced Chemistry"和$current_content="Valence Electrons"链接会出来为：

<form method=​"post" action=​"mainpage.php?subject_id=Advanced" chemistry&note_id=​"Valence" electrons>​ 

Answer 1

您需要urlencode()变量，像这样：

<?php 

$current_subject = $_GET['subject_id']; 
$current_content = $_GET['note_id']; 

$subject = urlencode($current_subject); 
$content = urlencode($current_content); 

$action = "mainpage.php?subject_id=" . $subject . "&note_id=" . $content; 

?> 

<form method="post" action="<?php echo $action; ?>"> 
    <input type="text" name="list_item" value=""> 
    <input type="submit" name="new_item" value="New Item"> 
</form> 

此外，你应该确认该数据的习惯得到。你可能想检查它们是整数。

Answer 2

使用urlencode()或rawurlencode()

Answer 3

你应该看看PHP的urlencode()

$current_subject = urlencode($_GET['subject_id']); 
$current_content = urlencode($_GET['note_id']); 

Answer 4

始终报价您的属性和逃避你的数据。引用，它的工作：

<?php 

$current_subject = $_GET['subject_id']; 
$current_content = $_GET['note_id']; 

echo "<form method=\"post\" action=\"mainpage.php?subject_id=" . $current_subject . "&note_id=" . $current_content . "\">"; 

?> 
    <input type="text" name="list_item" value="" /> 
    <input type="submit" name="new_item" value="New Item" /> 
</form> 

但是，当然，你应该先urlencode它：

<?php 
$current_subject = $_GET['subject_id']; 
$current_content = $_GET['note_id']; 
$url = 'mainpage.php?subject_id=' . urlencode($current_subject) . '&note_id=' . urlencode($current_content); 
?> 
<form method="POST" action="<?php echo $url; ?>"> 
    <input type="text" name="list_item" value="" /> 
    <input type="submit" name="new_item" value="New Item" /> 
</form> 

Answer 5

我可能会使用http_build_query：

$query = http_build_query(array('subject_id' => $_GET['subject_id'], 'foo' => 'bar')); 
<form action="mainpage.php?<?php echo $query; ?>"> 

我有一个怀疑，$query也应该是htmlentities'd。
http_build_query处理URI编码，但我不确定它是否应该在HTML之上编码（毕竟它是HTML属性）。