Try our conversational search powered by Generative AI!

Developing with XForms

Product version:

EPiServer CMS 5 R2 SP1

Document version:


Document last saved:


XForms contains logic to store and present forms and data posted from forms. Together with the forms editor in EPiServer CMS 5 Edit mode, it enables editors to create and modify forms and to view form data. The XForms architecture enables customization, allowing developers to adapt the XForms functionality. This technical notes describes how the technology is built up and answers common questions concerning EPiServer XForms.

Table of Contents

Basic XForms Concepts

Editors that create forms in Edit mode work with javascript to create an HTML version of the form. When saved, the content of the form is transformed using regular expressions and stored as a mix of XHTML and XForms markup.

When the form is presented, it is loaded as Web controls and rendered as HTML to the client, so there is no need to install any additional software to support XForms to the client.

Note: When using this approach, EPiServer CMS does not support the client-side functionality that may be available when using an XForms browser plug-in.

Folders for Forms

Form folders make it possible to organize a group of forms in a folder structure, which can be useful if the site contains many forms. It is also possible to set a default folder for forms for either the entire Web site or parts of the Web site, making it easier for editors to manage forms. This is done by adding a dynamic property named "DefaultFormFolder" and then setting the property value to the folder of your choice for the part(s) of the Web site you want to affect.

When creating a new form page and selecting a form, the default folder will be the starting point for the form selection. When creating new forms, the default folder will be suggested. This property is supported, but is not included in the sample site and is, therefore, not included in the language files.

XForms Forms Management Structure


  1. A form is created in the Form Editor in EPiServer CMS.
  2. Through EPiServer.XForms, the form is converted to an XForm regular expressions. Steps 1 and 2 can be repeated until the form has the desired look and functionality.
  3. Through EPiServer.XForms, the form is sent to the client as XHTML. It’s possible to alter the form before it is presented to the client by attaching to events.
  4. Data is posted and validated. If the input does not pass validation, error messages will be sent to the client. (It's also possible to have additional validation on the client before sending the form to the server. This is done by setting the property EnableClientScript to true on the XFormControl web control.)
  5. Through EPiServer.XForms, form data is passed into the EPiServer CMS data warehouse. It is also possible to send the posted data as an e-mail or to a custom URL.
  6. If the data has been saved to the database, it is possible to load and show the posted data on the Web site.

EPiServer.XForms Namespace

XForm Class

This class is a representation of the content and structure of the form. The content of the form is saved as XML. The XML contains the instance node, which contains the data for the form such as field validation, default values for fields etc. It also stores information about the structure of the form. This is stored as XHTML with controls from the XForms namespace. This class is responsible for creating a default XFormData object from its instance node.

The following code shows an example of how an XForms form is stored.

<root xmlns:xforms= xmlns:xsi=>
                    </Author />
       <table id="id_matrix" border="0">
                    <td valign="top" width="100" height="10">
                           <span id="id_fields1">Author</span>
                    <td valign="top" width="200" height="10">
                           <xforms:input ref="Author" value="" id="id_fields2" size="40" />
Note: Even though this example shows a form that is structured using HTML tables, there are no limitations for the structure of the form to use other elements, such as the ‘div’-element. In EPiServer CMS the built-in form editor creates a form using HTML tables.

XFormData Class

The XFormData class contains information on the content of a posted form. Normally a new XFormData class instance is created when a form is posted, but it is also possible to define an old post when loading a form to be able to re-edit data. This is also the class representing existing data when loading form data for a form.

DataTypes Class

The DataTypes class contains information on all the data types available for form fields. These are contained in a public property, Types, which is basically a hash table. The hash table simply contains keys and values, where keys are the unique key for the data type and the value is a regular expression.

When posting form data, all input will be validated against the regular expression for the data type of the input control. If no data type has been specified for the control, the data will be validated against the public string property “InvalidDefaultInputRegex”. The reason for having a default validation is to prevent malicious data being posted from a form.

EPiServer.XForms.WebControls Namespace

XFormControl Class

This is probably the most important class when working with XForms. XFormControl is a Web control that is used to display an XForms form and makes sure that the input is validated.

The class exposes a public method, SubmitForm, to be able to submit form data. The form itself does not trigger the actual posting. This is handled by any existing submit Web controls in the form, which is also why it is possible to have several buttons on the same form that may trigger different actions. It is, of course, also possible to call this method from the code.

What happens when the form is loaded?

  1. The BeforeLoadingFormsEvent is triggered. It's possible to alter the xform definition here by changing the formDefinition property of the LoadFormEventArgs that are sent to the event handler. (For instance you could replace the table structure with a div structure by applying regular expressions to the form content).
  2. The XML from the FormDefinition.Document property is parsed by Page.ParseControl. The parsed controls are added as child controls. Basically these would be Literal controls for the HTML and form Web controls derived from XFormControlBase.
  3. For fields that have validation, validation control(s) will be added and connected to the corresponding Web control.
  4. ControlsCreated  – public event is triggered. It’s possible to alter the appearence and funtion of the form at this time.
  5. Rendering of the form takes place. All Xform controls are rendered as xhtml.

What happens when data is submitted?

  1. The SubmitForm event for a submit control is triggered. If defined on the submit control, the submit will set values for e-mail and/or custom URL to the forms data property for the XFormControl that it is contained in. The SubmitForm method is called with the channel options set on the submit control. See Sending Form Data for more information on available channels.
  2. Validation will take place to ensure that rules about anonymous users and several postings from the same user are followed. If there are validation errors against these rules StaticValidators will be added to the Page.Validators collection to ensure that validation errors will be thrown. A StaticValidator is a validator that will always give a validation error.
  3. BeforeReadingPostedData – public event is triggered. If the CancelSubmit property is set to true a StaticValidator is added for all strings in the ErrorMessages array.
  4. Page.Validate is called which triggers all server side validators for the form fields. If the CancelSubmit for the BeforeReadingPostedData event is set to true or the page is not valid the posting is cancelled.
  5. Posted data is read and validated.
  6. BeforeSubmitPostedData – public event is triggered. If the CancelSubmit property is set to true a StaticValidator is added for all strings in the ErrorMessages array.
  7. If the CancelSubmit for the BeforeReadingPostedData event is set to true or the page is not valid the posting is cancelled.
  8. The form data is sent. If the user is anonymous a cookie will be set to indicate that the form has been posted.
  9. AfterSubmitPostedData – public event is triggered.

XForms Web Controls

The following table shows the different controls and their corresponding HTML tags used while rendering themselves:

Web Control



<input />


<input type=”checkbox” />

Select1, with Rendertype.Full

<input type=”radio” />

Select1, with Rendertype.Minimal



<input type=”submit” />




Not implemented yet

Sending Form Data

It is possible to send an XFormData object to different channels. A channel might be storage in the database, an e-mail address or a URL. The ChannelOptions property is used to specify one or several channels that the data will be sent to.

Channel Name



The entire XFormData object will be serialized and saved to the tblItem table in the database.


The content of the form data is transformed using a predefined XSLT.


The values for the form will be uploaded to a given URL using the System.Net.WebClient class.


Can I retrieve a list of all users that have posted a form and view each user's posted data?

The XForm class has a method, GetPostedData that allows you to extract data posted to the database. The method will return an IList containing XFormData objects for the form in question. The UserName property for an XFormData contains information about the user that has posted the form.

Can I retrieve previously posted data, modify it and save it?

It is possible to re-edit data that is posted to the database (or another custom location as long as you can load and save the XFormData object). To do this, create an XFormControl object and set its Data property to the XFormData object you want to load. The form will be loaded with the values from the posted data. If the data is posted to the database, the old data will be replaced in the database.

You could also load an XFormData object and modify the object programmatically. By using the Send method it is possible to store the modified content again.

Can I edit the appearance of a form?

There are two main ways to edit the appearance of a form.

  1. Edit the content of the form in the BeforeLoadingFormsEvent. If you do this, you should be aware that it might affect the behavior of the built-in form editor. The LoadFormsEventArgs class has a property, EditMode, that defines if the form is loaded in edit mode. This makes it possible to only make changes to the form to the end user, thus not affecting the EPiServer CMS Edit mode.
  2. Attach to the ControlsCreated event for the XFormControl object. The content of the form is parsed and added to the Controls collection. The HTML content will be parsed as Literal controls and the XForm controls as the different controls in the EPiServer.XForms.WebControls namespace. There should not be any problems modifying the HTML content.

If you want to change the appearance of the XForm Web controls, it is recommended that you do this by adding or modifying the attribute collection for the control. By using CSS and setting the class attribute for the control, you should be able to do a lot for the appearance of the form control. In EPiServer CMS 5 there is a method, called ExtractXFormControls, that can be used to get an ArrayList containing the input elements for the form.

How do I send a customized e-mail?

When using the e-mail option for sending XFormData the content of the form data is transformed using an XSLT schema. Unfortunately it is not currently possible to specify a custom XSLT schema that is used to transform the form data to an e-mail. You could still implement your own e-mail handling by adding custom logic to the BeforeSubmitPostedData event on the XFormControl Web control. Before exiting your custom logic you should remove the Email option from the e.FormData.ChannelOptions property to ensure that the regular e-mail channel is not triggered.

If you simply set e.FormData.ChannelOptions to ChannelOptions.None you will lose any additional channels that the form data is sent to, e.g. the Database Channel.