Form Data

HTML forms support two encoding types for sending data to the server:

1. application/x-www-form-urlencoded

The default encoding for HTML forms. Data is URL-encoded:

POST /api/login HTTP/1.1
Content-Type: application/x-www-form-urlencoded

username=alice&password=s3cret&remember=true

Encoding Rules:

• Spaces → + (or %20)
• Special chars → %XX (e.g., @ → %40)
• Keys and values separated by =
• Pairs separated by &

2. multipart/form-data

Used for file uploads and binary data. Uses boundary strings:

POST /api/upload HTTP/1.1
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxk

------WebKitFormBoundary7MA4YWxk
Content-Disposition: form-data; name="username"

alice
------WebKitFormBoundary7MA4YWxk
Content-Disposition: form-data; name="avatar"; filename="photo.jpg"
Content-Type: image/jpeg

[binary data]
------WebKitFormBoundary7MA4YWxk--

When to Use Each

Encoding	Use Case	Supports Files
URL-encoded	Simple text forms	No
Multipart	File uploads, mixed data	Yes
JSON	API data (not forms)	No (use base64)

JavaScript Form Submission

// URL-encoded
const form = new FormData();
form.append('username', 'alice');
fetch('/api/login', {
  method: 'POST',
  body: new URLSearchParams(form)
});

// Multipart (file upload)
const formData = new FormData();
formData.append('avatar', fileInput.files[0]);
fetch('/api/upload', {
  method: 'POST',
  body: formData  // Browser sets Content-Type automatically
});

Security Considerations

• Validate file types — Don't trust Content-Type from client
• Limit file size — Prevent DoS attacks
• Scan uploads — Check for malware
• Store outside web root — Prevent direct access

Key Principles

1. Follow SOLID principles
2. Write clean, readable code
3. Test thoroughly
4. Document decisions
5. Monitor in production

Implementation

• Start simple, refactor as needed
• Use established patterns
• Consider trade-offs
• Review with peers

Continuous Improvement

• Learn from incidents
• Update documentation
• Share knowledge
• Mentor others

Key Points

• Understanding Form Data is essential for production systems
• Always consider scalability and maintainability
• Test thoroughly before deploying to production
• Monitor performance and set up alerting

Common Patterns

1. Validation: Always validate input at the boundary
2. Error Handling: Use structured error responses
3. Logging: Log key events for debugging
4. Testing: Unit, integration, and load tests
5. Documentation: Keep docs updated with code changes