Stars: 447
Forks: 140
Pull Requests: 156
Issues: 145
Watchers: 51
Last Updated: 2023-09-16 09:48:32
đź“ť Generating, validating and processing secure forms in PHP. Handy API, fully customizable, server & client side validation and mature design.
License: Other
Languages: PHP, HTML, JavaScript, Latte
Nette\Forms greatly facilitates creating and processing web forms. What it can really do?
Why should you bother setting up framework for a simple web form? You won't have to take care about routine tasks such as writing two validation scripts (client and server) and your code will be safe against security breaches.
Nette Framework puts a great effort to be safe and since forms are the most common user input, Nette forms are as good as impenetrable. All is maintained dynamically and transparently, nothing has to be set manually. Well known vulnerabilities such as Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) are filtered, as well as special control characters. All inputs are checked for UTF-8 validity. Every multiple-choice, select box and similar are checked for forged values upon validating. Sounds good? Let's try it out.
Documentation can be found on the website.
Do you like Nette Forms? Are you looking forward to the new features?
Thank you!
The recommended way to install is via Composer:
composer require nette/forms
It requires PHP version 8.0 and supports PHP up to 8.3.
Client-side support can be installed with npm or yarn:
npm install nette-forms
Let's create a simple registration form:
use Nette\Forms\Form;
$form = new Form;
$form->addText('name', 'Name:');
$form->addPassword('password', 'Password:');
$form->addSubmit('send', 'Register');
echo $form; // renders the form
Though we mentioned validation, yet our form has none. Let's fix it. We require users to tell us their name, so we should call a setRequired()
method, which optional argument is an error message to show, if user does not fill his name in:
$form->addText('name', 'Name:')
->setRequired('Please fill your name.');
Try submitting a form without the name - you will keep seeing this message until you meet the validation rules. All that is left for us is setting up JavaScript rules. Luckily it's a piece of cake. We only have to link netteForms.js
, which is located at /client-side/forms
in the distribution package.
<script src="netteForms.js"></script>
Nette Framework adds required
class to all mandatory elements. Adding the following style will turn label of name input to red.
<style>
.required label { color: maroon }
</style>