I need to redirect a user to an external site though a POST request.
It's not quite clear what you mean, so let's take a few scenarios:
User should POST form to a server other than your own
Easy, just specify the target as the form action:
<form action="http://someotherserver.com" method="post">
User should be redirected after a successful POST submit
Easy, accept and process the POST data as usual, then respond with a
303 redirect header.
User should POST data to your server and, after validation, you want to POST that data to another server
Slightly tricky, but three options:
307redirect, which means the user should attempt the same request at another address. Theoretically it means the browser should POST the same data to another server. I'm not quite sure how well supported this is, but any browser understanding HTTP1.1 should be able to do it. AFAIA it's not used that often in practice.
See here for a list of all HTTP redirection options: http://en.wikipedia.org/wiki/Http_status_codes#3xx_Redirection
Just set HTML form's action URL to the particular external site.
Here's an SSCCE, just copy'n'paste'n'run it:
<!doctype html> <html lang="en"> <head> <title>SO question 2604530</title> </head> <body> <form action="http://stackoverflow.com/questions/2604530/answer/submit" method="post"> <textarea name="post-text"></textarea> <input type="submit" value="Post Your Answer"> </form> </body> </html>
You'll see that Stackoverflow has good CSRF protection ;)
POST request via standard
http methods. Are you sure that
GET isn't an option here?
Using a form is probably your only option as links, HTTP redirects and
<meta http-equiv="refresh" > will only cause the browser to load another URL using the GET method.
<input type="hidden"> fields and let the user press the submit button.
You may also want to ensure that the page you're redirecting to doesn't already accept GET parameters. Some scripts accept both GET and POST indiscriminately.
©2020 All rights reserved.