PHP not reading $_GET parameter when sending an AJAX request

Question

I've been struggling with this since months, and finally got to the point I need to fix it on my project.

The thing is, I'm sending an ajax request to a php file where I need to read the current $_GET['user_id'] value in order to insert a query. But php just won't read $_GET['user_id'] value from the current URL address, like if it doesn't exist.

This is driving me crazy, since I don't know any other methods that can achieve the desired result which is following a user account.

Here's the piece of code, which is meant for explanation purposes only:

// PHP

<?php
require_once "db.php";

$query = "INSERT INTO followers(follower, following) ";
$query .= "VALUE('{$_SESSION['id_user']}','{$_GET['user_id']}' )";
$result = mysqli_query($connect_db, $query);

?>

// AJAX

<script>
    $('.js-follow_user_btn').click(function(){
            follow_unfollow_action();
        });


        function follow_unfollow_action(){

            $.ajax({
                type: 'POST',
                url: 'follow_user.php',
                success: function(data) {
                    alert('done');
                }
            });

        }
</script>

Answer 1

First of all, you need to change your method from GET to POST, as people already pointed out.

Second, you need to actually specify the user_id parameter in the URL. Encode the parameter using the urlencode function:

<script>
    $('.js-follow_user_btn').click(function(){
            follow_unfollow_action();
        });


        function follow_unfollow_action(){

            $.ajax({
                type: 'GET',
                url: 'follow_user.php?user_id='.urlencode($user_id),
                success: function(data) {
                    alert('done');
                }
            });

        }
</script>

Remember to urldecode the parameter in your follow_user.php script.

Answer 2

You are trying to access the $_GET url param from the php file which isn't being run directly from the browser.

In order for you to use the value in your php ajax call you need to use this method to get the value

$.ajax({
    type: 'POST',
    url: 'follow_user.php',
    data: { user_id: user_id },
    success: function(data) {
        alert('done');
    }
});


//follow user
<?php
require_once "db.php";

$query = "INSERT INTO followers(follower, following) ";
$query .= "VALUE('{$_SESSION['id_user']}','{$_POST['user_id']}' )";
$result = mysqli_query($connect_db, $query);

?>

Answer 3

The PHP $_GET superglobal is populated with data from the query string of the URL requested (regardless of the HTTP method used to make the request).

This is the URL you are using:

url: 'follow_user.php',

There is no query string on it at all.

Possibly you are expecting it to copy the query string from the page hosting the JavaScript. It doesn't work like that, you need to provide the data explicitly.

---

A little aside:

You are inserting data into the database. You should be using a POST request for this (and you are) but you should be passing the data in the request body (otherwise you are very likely to accidentally create something that improperly responds to a GET request.

So first things first: Change the PHP to use $_POST instead of $_GET.

While you are editing it, your PHP is dangerously vulnerable to SQL injection attacks. You need to learn how to defend your code from them.

---

OK, so next you need to get the data from the query string of the current page.

You can read it in JavaScript. This answer explains a few approaches.

Once you have the data, you can put it in the request:

var user_id = (new URL(url_string)).searchParams.get("user_id");
// See the answer linked above to see how this works and for compatibility with old browsers

$.ajax({
    type: 'POST',
    url: 'follow_user.php',
    data: { user_id: user_id },
    success: function(data) {
        alert('done');
    }
});

… remember, this puts it in the request body so you'll need to read it with $_POST and not $_GET.

Answer 4

Just change POST by GET in your code + pass the vars in data or in the URL

 $.ajax({
    type: 'GET',
    url: 'follow_user.php',
    data: { user_id: "XXXXXX"}
    success: function(data) {
        alert('done');
    }
 });

Or better ! Let POST in your JS code and get the var with $_POST + pass the data

Answer 5

In your ajax request, you are using the POST method type, which will be received in php's $_POST superglobal. If you want to get it via get, change it to GET method type, but since you are sending information to your database, I believe you better stick with POST.

Semantically speakin in web slang POST is to "save" data and GET is to obtain resources.

Cheers!

Answer 6

Because you have type: 'POST', in ajax call, make it type: 'GET', or remove that line by default, the call is of GET method