Using a hidden value instead of $ _GET or $ _REQUEST

Question

I use hidden values ​​for forms.

Example:

 <form method="post" action="page.php">
 <input type="text" name="name""
 <input type="hidden" name="book_id" value="$bookid">
 <input type="button">
 </form>

$bookidis the value $_GETforbook.php?id=34324

Therefore, instead of executing, page.php?id=$bookidI use $bookidin a hidden field.

My question is: is it harmful to use hidden values ​​using $GETor $POSTin action of a form?

Answer 1

To answer your question: no, it is not harmful to use hidden inputs in this way.

To fix the provided code, you need to specify the hidden input of the name and change the method to GET:

 <?php
 if(array_key_exists('id', $_GET)) {
     $bookid = (int) $_GET['id'];
 }
 ?>

 <form method="get" action="page.php">
     <input type="text" name="name">
     <input type="hidden" name="id" value="<?php echo $bookid; ?>">
     <input type="button">
 </form>

Answer 2

: , vs, $GET $POST ?

: $_GET $_POST . , . .