Try our conversational search powered by Generative AI!

Developing with XForms

Product version:

EPiServer CMS 4.62

Document version:


Document creation date:


Document last saved:



XForms in EPiServer CMS contains logic to store and present forms and data posted from forms. Together with the forms editor in Edit mode it enables editors to create and modify forms and to view form data. The XForms architecture enables customization, allowing developers to adapt the XForms functionality. This document describes how the technology is built up and answers common questions concerning XForms in EPiServer CMS.

Table of Contents

Basic XForms Concepts
    - Folders for Forms

XForms Forms Management Structure

EPiServer.XForms Namespace
    - XForm Class
    - XFormData Class
    - DataTypes Class

EPiServer.XForms.WebControls Namespace
    - XFormControl Class
    - XForms Web Controls

Sending Form Data


Basic XForms Concepts

Editors that create forms in Edit mode work with Internet Explorer's HTML edit functionality. When saved, the content of the form is transformed using regular expressions and stored as a mix of XHTML and XForms markup.

When the form is presented, it is loaded as Web controls and rendered as HTML to the client, so there is no need to install any additional software to support XForms to the client.

Note: When using this approach, EPiServer CMS does not support the client side functionality that may be available when using an XForms browser plug-in.

Folders for Forms

From EPiServer CMS 4.60 a new concept called form folders is introduced in EPiServer CMS. This makes it possible to organize a group of forms in a folder structure, which can be useful if the site contains many forms.  It is also possible to set a default folder for forms for either the entire Web site or parts of the Web site, making it easier for editors to manage forms. This is done by adding a dynamic property named "DefaultFormFolder" and then setting the property value to the folder of your choice for the part(s) of the Web site you want to affect.

When creating a new form page and selecting a form, the default folder will be the starting point for the form selection. When creating new forms, the default folder will be suggested.

This property is supported, but is not included in the sample site and is, therefore, not included in the language files.

XForms Forms Management Structure


  1. A Form is created in the Form Editor in EPiServer CMS.
  2. Through EPiServer.XForms, the form is converted to an XForm regular expressions. Steps 1 and 2 can be repeated until the form has the desired look and functionality.
  3. Through EPiServer.XForms the form is sent to the client as XHTML. It’s possible to alter the form before it is presented to the client by attaching to events.
  4. Data is posted and validated. If the input does not pass validation errors messages will be sent to the client.
  5. Through EPiServer.XForms, form data is passed into EPiServer CMS data warehouse. It is also possible to send the posted data as an e-mail or to a custom url.
  6. If the data has been saved to the database it is possible to load and show the posted data on the Web site.

EPiServer.XForms Namespace

XForm Class

This class is a representation of the content and structure of the form. The content of the form is saved as XML. The XML contains the instance node, which contains the data for the form. It also stores information about the structure of the form. This is stored as XHTML with controls from the XForms namespace. This class is responsible for creating a default XFormData object from its instance node.

The following code shows an example of how an XForms form is stored.

<root xmlns:xforms= xmlns:xsi=>



                    </Author />



       <table id="id_matrix" border="0">


                    <td valign="top" width="100" height="10">

                           <span id="id_fields1">Author</span>


                    <td valign="top" width="200" height="10">

                           <xforms:input ref="Author" value="" id="id_fields2" size="40" />





Note: Even though this example shows a form that is structured using HTML tables, there are no limitations that do not allow the structure of the form using other elements as the ‘div’-element. From EPiServer CMS 4.60 the built in form editor creates a form using HTML tables.

XFormData Class

The XFormData class contains information on the content of a posted form. Normally a new XFormData class instance is created when a form is posted, but it is also possible to define an old post when loading a form to be able to re-edit data. This is also the class representing existing data when loading form data for a form.

DataTypes Class

The DataTypes class contains information on all the data types available for form fields. These are contained in a public property, Types, which is basically a hash table. The hash table simply contains keys and values, where keys are the unique key for the data type and the value is a regular expression.

When posting form data, all input will be validated against the regular expression for the data type of the input control. If no data type has been specified for the control, the data will be validated against the public string property “InvalidDefaultInputRegex”. The reason for having a default validation is to prevent malicious data being posted from a form.

EPiServer.XForms.WebControls Namespace

XFormControl Class

This is probably the most important class when working with XForms. XFormControl is a Web control that is used to display an XForms form and makes sure that the input is validated.

The class exposes a public method, SubmitForm, to be able to submit form data. The form itself does not trigger the actual posting. This is handled by any existing submit Web controls in the form, which is also why it is possible to have several buttons on the same form that may trigger different actions. It is, of course, also possible to call this method from the code.

What happens when the form is loaded?

  1. The XML from the FormDefinition.Document property is parsed by Page.ParseControl. The parsed controls are added as child controls. Basically these would be Literal controls for the HTML and form Web controls derived from XFormControlBase.
  2. ControlsCreated  – public event is triggered. It’s possible to alter the appearence and funtion of the form at this time
  3. Rendering of the form takes place. All Xform controls are rendered as xhtml.

What happens when data is submitted?

  1. The SubmitForm event for a submit control is triggered. If defined on the submit control, the submit will set values for e-mail and/or custom URL to the forms data property for the XFormControl that it is contained in. The SubmitForm method is called with the channel options set on the submit control. See Sending Form Data for more information on available channels.
  2. Validation will take place to ensure that rules about anonymous users and several postings from the same user are followed. If there are validation errors against these rules StaticValidators will be added to the Page.Validators collection to ensure that validation errors will be thrown. A StaticValidator is a validator that will always give a validation error.
  3. BeforeReadingPostedData – public event is triggered. If the CancelSubmit property is set to true a StaticValidator is added for all strings in the ErrorMessages array.
  4. Page.Validate is called. If the CancelSubmit for the BeforeReadingPostedData event is set to true or the page is not valid the posting is cancelled.
  5. Posted data is read and validated. StaticValidators will be added for any data that does not validate.
  6. BeforeSubmitPostedData – public event is triggered. If the CancelSubmit property is set to true a StaticValidator is added for all strings in the ErrorMessages array.
  7. If the CancelSubmit for the BeforeReadingPostedData event is set to true or the page is not valid the posting is cancelled.
  8. The form data is sent. If the user is anonymous a cookie will be set to indicate that the form has been posted.
  9. AfterSubmitPostedData – public event is triggered.

XForms Web Controls

The following table shows the different controls and their corresponding HTML tags used while rendering themselves:

Web Control



<input />


<input type=”checkbox” />

Select1, with Rendertype.Full

<input type=”radio” />

Select1, with Rendertype.Minimal



<input type=”submit” />




Not implemented yet


Sending Form Data

It is possible to send an XFormData object to different channels. A channel might be storage in the database, an e-mail address or a URL. The ChannelOptions property is used to specify one or several channels that the data will be sent to.

Channel Name



The entire XFormData object will be serialized and saved to the tblItem table in the database.


The content of the form data is transformed using a predefined XSLT.


The values for the form will be uploaded to a given URL using the System.Net.WebClient class.



Can I retrieve a list of all users that have posted a form and view each user's posted data?

The XForm class has a method, GetPostedData that allows you to extract data posted to the database. The method will return an IList containing XFormData objects for the form in question. The Sid property for an XFormData contains information about the user that has posted the form.

Can I retrieve previously posted data, modify it and save it?

It is possible to re-edit data that is posted to the database (or another custom location as long as you can load and save the XFormData object). To do this, create an XFormControl object and set its Data property to the XFormData object you want to load. The form will be loaded with the values from the posted data. If the data is posted to the database, the old data will be replaced in the database.

You could also load an XFormData object and modify the object programmatically. By using the Send method it is possible to store the modified content again.

Can I edit the appearance of a form?

There are two main ways to edit the appearance of a form.

  1. Edit the HTML content of a form. If you do this, you should be aware that it might affect the behavior of the built in forms editor.
  2. Attach to the ControlsCreated event for the XFormControl object. The content of the form is parsed and added to the Controls collection. The HTML content will be parsed as Literal controls and the XForm controls as the different controls in the EPiServer.XForms.WebControls namespace. There should not be any problems modifying the HTML content.

If you want to change the appearance of the XForm Web controls, it is recommended that you do this by adding or modifying the attribute collection for the control. By using CSS and setting the class attribute for the control, you should be able to do a lot for the appearance of the form control. From EPiServer CMS 4.60 there is a method, called ExtractXFormControls, that can be used to get an ArrayList containing the input elements for the form.

How do I send a customized e-mail?

When using the e-mail option for sending XFormData the content of the form data is transformed using an XSLT schema. Unfortunately it is not currently possible to specify a custom XSLT schema that is used to transform the form data to an e‑mail. You could still implement your own e-mail handling by adding custom logic to the BeforeSubmitPostedData event on the XFormControl Web control. Before exiting your custom logic you should remove the Email option from the e.FormData.ChannelOptions property to ensure that the regular e-mail channel is not triggered.

If you simply set e.FormData.ChannelOptions to ChannelOptions.None you will lose any additional channels that the form data is sent to, e.g. the Database Channel.