Request.Form和Request.QueryString之间的区别?

时间:2013-12-20 06:01:20

标签: c# asp.net http request.querystring request.form

有些人可以告诉我Request.FormRequest.QueryString之间的确切区别吗?

我知道一个区别,比如

  

如果HTTP请求方法是POST,则用户提交的数据在    Request.Form()集合

     

如果HTTP请求方法是GET,那么用户提交的数据就在    Request.QueryString()集合

还有其他区别吗?并且非常感谢任何一个例子。

6 个答案:

答案 0 :(得分:20)

Request.Form中,数据发布在http标题中,而QueryString数据则通过网址发送。

答案 1 :(得分:12)

我发现了其他一些差异

Request("id") 

首先尝试找到

Request.Form("id") 

然后

Request.Querystring("id") 

然后

Request.Cookies("id") 

最后

Request.ServerVariables("id") 
  

建议尽可能使用显式命名约定,因为它更高效,更可读。它还使您能够确定信息的来源,因为系统将在第一次命中后停止...如果您指定信息的位置,系统也会更快。

我们可以参考此链接了解更多详情:

http://www.hanselman.com/blog/ASPNETParamsCollectionVsQueryStringFormsVsRequestindexAndDoubleDecoding.aspx

但任何人都知道其他任何差异,我真的很感激。

答案 2 :(得分:7)

如MSDN所述,

  

Request.Form):Request.Form(element)的值是一个数组   请求正文中出现的元素值。您可以   通过调用确定参数值的数量   的Request.Form(元件).Count之间。如果参数没有多个   与之关联的值,计数为1.如果参数不是   发现,计数是0。

     

和(Request.QueryString):Request.QueryString(参数)的值   是一个包含所有参数值的数组   请求参数。您可以通过确定参数值的数量   调用Request.QueryString(parameter).Count。如果变量没有   有多个与之关联的数据集,计数为1.如果   找不到变量,计数为0。

所以,有些事情需要注意:

在页面上的典型表单中,我们可能会包含一些隐藏的元素:

<form method="post">
   <input type="hidden" name="lol" value="cat" />
   <input type="text" />
</form>

隐藏元素(如果内存服务)不会显示在QueryString中。所以,我认为有些事情没有在Request.QueryString中显示。不幸的是,我正在新机器上重新安装开发应用程序,目前无法对此进行测试,但如果我是对的,当您POST表单时,会发送有关表单及其内容的更多详细信息。当您访问QueryString时,您只能看到构成整个网址的内容,例如:

http://somesite.com/index.html?v=1&NonHiddenElement=lol&ManualValue=hello

答案 3 :(得分:3)

Request.Form - 表示您要检索已发布表单的值。

Request.QueryString - 表示您想要检索已在查询字符串上传递的值。

答案 4 :(得分:2)

的Request.Form()

  • 表单集合检索发布到HTTP请求正文的表单元素的值,仅检索表单中存在的那些元素和值。

的Request.QueryString()

  • QueryString集合检索HTTP查询字符串中变量的值,您可以在此处附加任何自定义变量和值,表单中不存在哪个事件。

答案 5 :(得分:-1)

Request.Form Collection

The Form collection retrieves the values of form elements posted to the HTTP request body, with a form using the POST method.
Form input is contained in headers. It is wise to not trust the data that is contained in headers, as this information can be falsified by malicious users. For example, do not rely on data such as cookies to securely identify a user.
As a security precaution, always encode header data or user input before using it. A general method of encoding data is to use Server.HTMLEncode. Alternatively, you can validate header data and user input with a short function such as the one described in Validating User Input to Avoid Attacks. For more detailed information about developing secure Web applications, see chapter 12 of MS Press - Writing Secure Code.
Syntax
Request.Form(element)[(index)|.Count]
Parameters
element
The name of the form element from which the collection is to retrieve values.
index
An optional parameter that enables you to access one of multiple values for a parameter. It can be any integer in the range 1 to Request.Form(parameter).Count.
Applies To
Request Object
Remarks
The Form collection is indexed by the names of the parameters in the request body. The value of Request.Form(element) is an array of all the values of element that occur in the request body. You can determine the number of values of a parameter by calling Request.Form(element).Count. If a parameter does not have multiple values associated with it, the count is 1. If the parameter is not found, the count is 0.
To reference a single value of a form element that has multiple values, you must specify a value for the index parameter. The index parameter may be any number between 1 and Request.Form(element).Count. If you reference one of multiple form parameters without specifying a value for index, the data is returned as a comma-delimited string.
When you use parameters with Request.Form, the Web server parses the HTTP request body and returns the specified data. If your application requires unparsed data from the form, you can access it by calling Request.Form without any parameters.

Request.QueryString Collection

The QueryString collection retrieves the values of the variables in the HTTP query string. The HTTP query string is specified by the values following the question mark (?). Several different processes can generate a query string. For example, the following anchor tag generates a variable named string with the value "this is a sample."
<A HREF="example.asp?string=this is a sample">string sample</A>

Query strings are also generated by sending a form or by a user typing a query into the address box of the browser.
Query strings are contained in request headers. It is wise to not trust the data that is contained in headers, as this information can be falsified by malicious users. For example, do not rely on data such as cookies to securely identify a user.
As a security precaution, always encode header data or user input before using it. A general method of encoding data is to use Server.HTMLEncode. Alternatively, you can validate header data and user input with a short function such as the one described in Validating User Input to Avoid Attacks. For more detailed information about developing secure Web applications, see chapter 12 of MS Press - Writing Secure Code.
Syntax
Request.QueryString(variable)[(index)|.Count]
Parameters
variable
Specifies the name of the variable in the HTTP query string to retrieve.
index
An optional parameter that enables you to retrieve one of multiple values for variable. It can be any integer value in the range 1 to Request.QueryString(variable).Count.
Applies To
Request Object
Remarks
The QueryString collection is a parsed version of the QUERY_STRING variable in the ServerVariables collection. It enables you to retrieve the QUERY_STRING variable by name. The value of Request.QueryString(parameter) is an array of all of the values of parameter that occur in QUERY_STRING. You can determine the number of values of a parameter by calling Request.QueryString(parameter).Count. If a variable does not have multiple data sets associated with it, the count is 1. If the variable is not found, the count is 0.
To reference a QueryString variable in one of multiple data sets, you specify a value for index. The index parameter can be any value between 1 and Request.QueryString(variable).Count. If you reference one of multiple QueryString variables without specifying a value for index, the data is returned as a comma-delimited string.
When you use parameters with Request.QueryString, the server parses the parameters sent to the request and returns the specified data. If your application requires unparsed QueryString data, you can retrieve it by calling Request.QueryString without any parameters.
You can use an iterator to loop through all the data values in a query string.

例如,如果发送以下请求:

for more details click this link