PHP superglobals are built-in variables that are accessible from anywhere in your script without needing to be explicitly declared as global. They play a crucial role in PHP, particularly when dealing with data coming from users, forms, cookies, sessions, and more. Let’s explore the most commonly used superglobals and their practical use cases.
$_GET — Retrieving Query Parameters
$_GET is used to collect data sent via URL query strings. It’s commonly used when you want to pass data through URLs, such as in search results, pagination, or filtering options.
Example Use Case: Search Form
In a simple search form, the user submits a query via the URL.
<form action="search.php" method="get">
<input type="text" name="q" placeholder="Search...">
<input type="submit" value="Search">
</form>The data can then be retrieved in search.php:
<?php
$searchQuery = $_GET['q'];
echo "You searched for: " . htmlspecialchars($searchQuery);
?>The URL might look like search.php?q=php+superglobals, and $_GET[‘q’] would contain php superglobals.
$_POST — Handling Form Data
$_POST is used to collect data submitted via HTTP POST requests, making it more secure for sensitive data compared to $_GET.
Example Use Case: Login Form
In a login form, the data is submitted using the POST method for security purposes.
<form action="login.php" method="post">
<input type="text" name="username" placeholder="Username">
<input type="password" name="password" placeholder="Password">
<input type="submit" value="Login">
</form>In login.php, you can access the form data:
<?php
$username = $_POST['username'];
$password = $_POST['password'];
// Process login logic here
echo "Logging in as: " . htmlspecialchars($username);
?>This ensures that the sensitive password data is not exposed in the URL.
$_REQUEST — General Data Collection
$_REQUEST contains data from $_GET, $_POST, and $_COOKIE. While convenient, its use is discouraged for security reasons because it’s difficult to control where the data is coming from.
Example Use Case: Combined Data Handling
Imagine a page that accepts input from either GET or POST, and you want a flexible way to handle either request method:
<?php
$name = $_REQUEST['name'];
echo "Hello, " . htmlspecialchars($name);
?>This script can work regardless of whether the name value comes from a URL query string or a form submission.
$_FILES — File Upload Handling
$_FILES is used to handle file uploads. It stores information about the uploaded file, such as name, type, size, and any upload errors.
Example Use Case: File Upload Form
<form action="upload.php" method="post" enctype="multipart/form-data">
<input type="file" name="uploadFile">
<input type="submit" value="Upload">
</form>In upload.php, you handle the uploaded file:
<?php
if ($_FILES['uploadFile']['error'] == 0) {
$fileTmpPath = $_FILES['uploadFile']['tmp_name'];
$fileName = $_FILES['uploadFile']['name'];
$uploadDir = 'uploads/';
move_uploaded_file($fileTmpPath, $uploadDir . $fileName);
echo "File uploaded successfully!";
} else {
echo "File upload failed!";
}
?>$_SESSION — Storing Session Data
$_SESSION is used to store data that persists across different pages of a website. It’s ideal for managing user sessions, such as login status.
Example Use Case: User Authentication
<?php
session_start();
$_SESSION['username'] = 'JohnDoe';
echo "Welcome, " . $_SESSION['username'];
?>The session data is stored on the server and will persist as long as the session is active, even if the user navigates to different pages.
$_COOKIE — Storing Data in the User’s Browser
$_COOKIE is used to store small amounts of data on the client side. It’s useful for storing user preferences, login sessions, or tracking users across sessions.
Example Use Case: Remembering User Preferences
<?php
// Set a cookie for 7 days
setcookie('theme', 'dark', time() + (7 * 24 * 60 * 60), '/');To retrieve the cookie value later:
<?php
if (isset($_COOKIE['theme'])) {
echo "Current theme: " . $_COOKIE['theme'];
}
?>Cookies are sent back to the server with each request, so this allows the website to remember user settings.
$_SERVER — Server and Execution Environment Information
$_SERVER provides information about the server and the current request environment. It’s useful for debugging and accessing request-related data.
Example Use Case: Getting the Client’s IP Address
<?php
$clientIP = $_SERVER['REMOTE_ADDR'];
echo "Your IP address is: " . $clientIP;
?>Other useful data in $_SERVER include request headers, server paths, and request methods.
$_ENV — Environment Variables
$_ENV is used to retrieve environment variables from the server. This is often useful in development and production environments where configuration settings (such as database credentials) might be set as environment variables.
Example Use Case: Accessing Environment Variables
<?php
$environment = $_ENV['APP_ENV'] ?? 'production';
echo "Current environment: " . $environment;
?>Environment variables are especially helpful for separating configuration data from code in applications.
Conclusion
PHP superglobals offer powerful ways to interact with user input, server data, and session management. Understanding their proper use and security implications—such as validating and sanitizing input—is essential for building secure and functional PHP applications. While superglobals like $_GET, $_POST, $_SESSION, and $_FILES are commonly used, others like $_ENV and $_COOKIE can be equally important in specific contexts.