Back to Questions
781
views1
comment
Sending form data to the server
websharper

What is the recommended way of sending data to the server from a page using UI.Next? I haven't found an example where this is demonstrated. Coming from an ASP.NET background, I expect to have a 

1

<form>...</form>

with an 

1

<input type="submit" />

which posts the form data to the address specified by the form. But even the formlets, designed to collect input data, are generated with an 

1

<input type="button" />

and without a form. Given that AFAIK only RPC calls have CSRF protection, I assume the recommended way to send form data to the server is to call a server RPC method, which returns an appropriate result message with a redirect link. This means the client, not the server, initiates a redirect. This makes some sense to me, but is this idiomatic? Is there a better way of doing this with WebSharper?

.

You are right that currently only RPC calls have CSRF protection, and that the idiomatic way to send form data is therefore to use RPC.

Adding CSRF protection to sitelets is on our TODO list. This issue aside, you can do classic form submission using sitelets and FormData:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

type EndPoint =
    // ...
    | [<EndPoint "POST /post">] Posted of args: PostedArgs

and PostedArgs =
    {
        [<FormData>] x: int
        [<FormData>] y: string
    }

[<Website>]
let MyWebsite =
    Application.MultiPage (fun ctx ep ->
        match ep with
        | Posted args -> // args.x and args.y come from the form submit
    )
1
2
3
4
5

<form action="/post" method="post">
  <input name="x" type="number" />
  <input name="y" />
  <input type="submit" />
</form>
By on 10/26/2016 8:44 AM ()

    Topic tags

    IntelliFactory Offices Copyright (c) 2011-2012 IntelliFactory. All rights reserved.
    Home | Products | Consulting | Trainings | Blogs | Jobs | Contact Us | Terms of Use | Privacy Policy | Cookie Policy     		Built with WebSharper