Adobe Exam AD0-E716 Topic 11 Question 44 Discussion

Actual exam question for Adobe's AD0-E716 exam

Question #: 44
Topic #: 11

An Adobe Commerce Developer is tasked with creating a custom form which submits its data to a frontend controller They have decided to create an action and have implemented the \Magento\Framework\App\Action\HttpPostActioninterface class, but are not seeing the data being persisted in the database, and an error message is being shown on the frontend after submission.

After debugging and ensuring that the data persistence logic is correct, what may be cause and solution to this?

AMagento does not allow POST requests to a frontend controller, therefore, the submission functionality will need to be rewritten as an API endpoint.

BThe developer forgot to implement a validatePostDataQ method in their action. They should implement this method: all non-validated POST data
gets stripped out of the request and an error is thrown.

CForm key validation runs on all non-AJAX POST requests, the developer needs to add the for_key to their requests.

Show Suggested Answer

Suggested Answer: C

According to the Magento Stack Exchange answer, form key validation is a security feature that prevents CSRF attacks by checking if the form key in the request matches the one generated by Magento. If the developer does not include the form_key in their custom form, the validation will fail and an error will be shown. Therefore, the developer needs to add the form_key to their requests by using <?= $block->getBlockHtml ('formkey') ?> in their template file. Verified Reference: https://magento.stackexchange.com/questions/95171/magento-2-form-validation

by Kristel at Apr 08, 2025, 01:27 AM

Limited Time Offer

25%

Off

Get Premium AD0-E716 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micaela

3 months ago

Haha, I bet the developer is kicking themselves for forgetting the form_key. That's like Ecommerce 101, you know? At least it's an easy fix.

upvoted 0 times

...

Olen

3 months ago

Wait, I thought Magento allowed POST requests to frontend controllers. This sounds like a trick question to me. Better double-check the documentation just in case.

upvoted 0 times

Lindy

1 months ago

C) Form key validation runs on all non-AJAX POST requests, the developer needs to add the for_key to their requests.

upvoted 0 times

...

Elroy

1 months ago

B) The developer forgot to implement a validatePostDataQ method in their action. They should implement this method: all non-validated POST data gets stripped out of the request and an error is thrown.

upvoted 0 times

...

Christiane

1 months ago

A) Magento does not allow POST requests to a frontend controller, therefore, the submission functionality will need to be rewritten as an API endpoint.

upvoted 0 times

...

Huey

3 months ago

Ah, I see the problem now. The developer forgot to implement the validatePostData method. That's a common oversight that can lead to issues with data persistence.

upvoted 0 times

Latrice

2 months ago

User 3: It's a common oversight that can cause problems with data persistence.

upvoted 0 times

...

Sanjuana

2 months ago

User 2: Yes, that was the issue. They forgot to implement it.

upvoted 0 times

...

Adrianna

2 months ago

User 1: Did you check if the developer implemented the validatePostData method?

upvoted 0 times

...

Jennie

3 months ago

Or maybe they forgot to implement the validatePostDataQ method in their action.

upvoted 0 times

...

Gwen

3 months ago

I agree, maybe the developer needs to rewrite the submission functionality as an API endpoint.

upvoted 0 times

...

Elliot

3 months ago

Hmm, I'm not sure if that's the problem. Didn't the question mention the developer checked the data persistence logic and it was correct? Sounds like a deeper issue to me.

upvoted 0 times

Louisa

2 months ago

C) Form key validation runs on all non-AJAX POST requests, the developer needs to add the for_key to their requests.

upvoted 0 times

...

Odette

2 months ago

upvoted 0 times

...

Corrina

2 months ago

A) Magento does not allow POST requests to a frontend controller, therefore, the submission functionality will need to be rewritten as an API endpoint.

upvoted 0 times

...