检查“ php：// input”和$ _POST

Question

I've already seen good posts about php://input vs $_POST, but I'm still confused if I need to check for both. Or just check for php://input. Any thoughts?

Is what I'm doing here redundant? Or necessary?

<?php
    if( $_POST ) {
        // $_POST variables are set, do the stuff
    } else {
        // get php://input
        $php_input = file_get_contents("php://input");

        if( $php_input ) {
            // php input exists, do the stuff
            $php_postdata = json_decode($php_input);

            // ...
        } else {
            // no $_POST and no php://input, so throw an error
            echo 'Error';
            exit();
        }
    }
?>

EDIT

I'm not expecting both $_POST and php://input at the same time; either one or the other. Use case is I get $_POST when hitting the PHP via jQuery and I get php://input when hitting the PHP via AngularJS.

Answer 1

Your question was "do I need to check for both, or just one." This question's answer explains exactly what will be in each, and the differences between them.

There is no way for us to know which one you need to check, but if you read that question and it's answer, YOU will know which one has the data you need. If you just need to merge both inputs, we would need to know what kind of data you expect to be getting - if it is coming in as application/json , for example, you could do:

$_POST = array_merge($_POST, json_decode(file_get_contents("php://input"), true));

EDIT: knowing that this is for angular, I would either overwrite the $_POST field with the json_decoded input:

if (empty($_POST)) {
    $_POST = json_decode(file_get_contents("php://input"), true));
}

Or make Angular POST the data in a way that will show up in the $_POST variable, there is a very detailed guide here which explains how to do that.