verify and popup

[yhi]

i have a php script which will post parameter to a website

code look something like

<form action="website.com/abc.php" method="POST">
<input name="aname" type="text">

<input name="submit" type="submit" value="submit">
</form>

now script is sending post request directly..

 

what i want to do is before submitting post request to that website i want to check parameters for their value & then popup a captcha 

i want to create a page which is something like tinypic.com

 

after you upload the image you will get a popup (captcha ) & if you solve it correctly your image willl get uploaded

& after that i want script to submit request to that website

PS
captcha is not really important but if u can help me in adding it it will be great
 

Edited August 26, 2016 by yhi

[cyberRobot]

Instead of passing the data directly to "website.com/abc.php", you can pass it to a PHP script that processes the data and displays the CAPTCHA. The CAPTCHA form would then send the data, maybe through $_SESSION variables to a script that validates the CAPTCHA response. If everything checks out, the script could perform a header() redirect to "website.com/abc.php".

[yhi]

"the script could perform a header() redirect to "website.com/abc.php"."
i dont want to redirect

i also want to send form data after verifying captcha..

[ginerjm]

Sounds like a JS question.

[yhi]

its half javascript & half php

i dont want user to know that i am searching in parameter so i cant use javascript for everything..

to understand the case better

suppose i dont want user to insert some certain values in the post

for example i dont want user to input ABCD

i will first check whats in parameter & compare it with value i dont want dont

its they both are same script will die();

if not script will show popup box with captcha & if captcha is correct send form request to that website..
 

Edited August 26, 2016 by yhi

[cyberRobot]

Is your form and the final destination (website.com/abc.php) under the same domain name? If so, is there a reason you don't want to use a header() redirect?