Why does a button submit my form when I did not ask it to?
You add a “Show tips” button to your contact form, wire it to a bit of JavaScript, and clicking it sends the half-written message. Or your “Save draft” button keeps getting used when people press Enter, and your inbox fills with drafts. Both come from browser defaults that the <button> tag has had for years.
We built 15 small forms, each testing one of those defaults, and ran them in Chromium 153, Firefox 155 and WebKit 26.6 against a local copy of Formgong's form backend. For each one we recorded whether a request left the page and exactly which button data was in it.
What do type submit, button and reset do?
| Setup | What happened |
|---|---|
<button> with no type, clicked | Submitted the form |
type="button", clicked | 0 requests |
type="reset", clicked after typing | 0 requests; the typed name was cleared |
| Two named submit buttons, “Send” clicked | intent=send only; the other button sent nothing |
| Same form, Enter pressed in the name field | intent=draft: the first button in the markup |
<input type="submit" value="Send"> without a name | Submitted; no button pair in the request |
The same input with name="action" | action=Send (named): the value is the visible text |
<button name="go"> with no value | go=, an empty answer |
The only submit button is disabled | 0 requests from a click and 0 from Enter |
| No submit button, one text field, Enter | Submitted |
| No submit button, two text fields, Enter | 0 requests |
Button outside the form with form="f" | Submitted that form, with from=footer |
| Required email empty, normal submit button | Blocked by the browser |
Second button with formaction | Sent to the other address, still checked first |
Third button with formnovalidate, email empty | Submitted with email= and intent=save |
The first row explains the “Show tips” bug. A <button> with no type is a submit button, so inside a form it sends the form. Formspree's HTML button guide lists button as the default type in its attribute list, then says a few paragraphs later that the default inside a form is submit. The second statement is the one that matched all three browsers. Write type on every button you add, so nobody reading your code has to remember.
The reset button did exactly what its name says and cleared what the visitor had typed, with no undo. It is rarely what anyone wants in a public form, because it sits next to Send and gets clicked by mistake.
What does a button inside a form send?
Only the button that submitted the form adds anything, and only if it has a name. Then it adds name=value, just like a field. With two buttons named intent, clicking Send gave intent=send and nothing from Save draft. That is a clean way to give one form two actions without JavaScript, and Formgong stored it as an ordinary answer, so intent: send showed up next to the message.
Enter is the surprise. When a visitor presses Enter in a text field, the browser acts as if they clicked the first submit button in the form, and in our test that sent intent=draft in all three browsers because Save draft came first in the markup. Put your main action first. If a form has no submit button at all, Enter still submits it when there is a single text field, and does nothing with two, which is why some search boxes work without a button and longer forms do not.
A few smaller details matter for the data. An <input type="submit"> sends its visible text as the value, so renaming the button on screen changes what your server receives. A named button with no value sends an empty answer. And a disabled submit button sends nothing, from a click or from Enter. If you send the form with fetch instead, new FormData(form) leaves the button out unless you pass it in, which our JavaScript FormData article measured.
Can one button send the form somewhere else?
Yes. Attributes on a submit button override the form's own for that click. A second button with formaction sent the same fields to a different address, and a third with formnovalidate skipped the browser's checks, so it went through with the required email still empty. That is how a “Save draft” button can save something incomplete. Our article on the form action attribute covers where those addresses can point. A button outside the form also works if you give it the form's id, as in form="f", which helps when a sticky footer holds the Send button.
What does a screen reader hear for a button?
Its text, if it has any. In Playwright's snapshot in all three browsers and in Chromium's own accessibility tree, “Send message” was read as a button named “Send message”, an <input type="submit"> with no value was named “Submit”, and an image button took its alt text. An icon-only button with just an SVG inside had no name at all, so a screen reader announces only “button”. Give those an aria-label; ours read as “Close”.
A disabled button is still listed, marked disabled, but Tab skips it in all three browsers. If you disable Send until the form is valid, keyboard and screen reader users cannot reach the button to find out why, so put the reason in text near it. A <div role="button"> got the right role and a name from its text, and that is all the markup gives it; everything else a button does is left to your script. The accessible contact form checklist has the rest of the button checks, including contrast.
What does a form backend do with the button?
Formgong, a form backend that sends each submission to your email or Telegram, treats a button's name=value like any other field and keeps it, which is what you want for an intent button and harmless otherwise. If you do not want the button in your emails, leave its name off. The markup below has the safe defaults: an explicit type on every button and the main action first.
The HTML form generator writes type="submit" on its button, and its optional script disables the button while the request runs and turns it back on when the answer comes, so a double click does not send twice. It is a small advantage. Static Forms' button tags guide, dated 25 June 2026, gives the same advice in prose: set the type every time, use name and value for intent, disable while a request is in flight. Formspree's button guide from 17 March 2025 mentions disabled for loading states in one line of its attribute list. So the advice is not new; the difference is only that our generator writes it for you. For the reload and second-tab cases a disabled button cannot stop, see our guide to stopping duplicate form submissions.
<form action="https://formgong.com/submit" method="POST"> <input type="hidden" name="access_key" value="fk_your_access_key"> <label for="message">Message</label> <textarea id="message" name="message" required></textarea> <!-- Not a submit button: say so, or it submits. --> <button type="button" id="tips">Show writing tips</button> <!-- The main action first: Enter in a field uses the first submit button. --> <button type="submit" name="intent" value="send">Send</button> <button type="submit" name="intent" value="draft" formnovalidate>Save draft</button> </form>
Did a button behave differently for you?
If a button in your form submits, or fails to, in a way this test did not show, write to support@formgong.com. We will rerun your case in all three browsers and add it to the table.
Frequently asked questions
What is the default type of a button in HTML?
Submit. A button with no type inside a form submits it. Use type="button" for buttons that only run JavaScript.
Is a submit button's value sent with the form?
Only for the button that was used, and only if it has a name. Then name=value is sent like a field.
Which button is used when someone presses Enter?
The first submit button in the form. Put your main action first so Enter does not trigger a secondary one.
What is the difference between button and input type=submit?
Both submit. A button can hold HTML such as an icon, while an input shows its value as text and sends that value.
Sources and documentation
Official references for this guide: Formgong: JavaScript FormData and what fetch actually sends, Formgong: HTML form action attribute explained. HTML forms, where data is stored.
Related guides
- Lovable form submissions to email and Telegram
- HTML contact form without a backend: a working example
- How to send website form submissions to Telegram
- Contact form not sending email? Check where it stops
- Managing website leads in Telegram without a CRM
- Form backend for Lovable, Bolt, v0, Cursor
- Telegram bot for a contact form: build or skip?
- GDPR form backend: 7 checks before you choose
- Lovable form not sending email? 6 fixes
- Netlify Forms not working? React and Bolt fixes
- Stop contact form spam without a CAPTCHA
- GitHub Pages contact form: a working setup
- Mailto Form in HTML: Why It Fails and What to Use
- HTML form to Google Sheets: 2 free methods
- Webflow form submission limit: what to do at 50
- Turnstile vs reCAPTCHA vs hCaptcha for forms
- Contact Form 7 and Elementor forms to Telegram
- Squarespace contact form not sending email?
- Shopify contact form: where do messages go?
- Google Form to Telegram: free Apps Script way
- Wix contact form not sending email? Fixes
- EU / GDPR Formspree alternatives compared
- HTML form action attribute explained
- How do HTML forms work? The HTTP request
- Types of Injection Attacks on Web Forms (2026)
- Indirect Prompt Injection in MCP
- MCP Rug Pull Attack: Detect Tool Changes
- Form without a backend: 7 ways that work
- Thank-you page after form submission (HTML)
- Indirect Prompt Injection Examples (2023–2026)
- Indirect Prompt Injection via Email
- What Is Tool Poisoning in MCP?
- WordPress contact form without a plugin
- Send email from frontend JavaScript
- How to Prevent Indirect Prompt Injection
- Honeypot Form Field: How to Add One That Works
- Contact Form with File Upload (HTML, No PHP)
- Angular contact form without a backend
- Send form submissions to Slack or Discord without Zapier
- Verify a form webhook signature (HMAC-SHA256)
- Contact forms that send nothing: 793 AI-built sites tested
- v0 contact form that actually sends: 3 ways
- How we tested AI-built contact forms, and 12 bugs we hit
- Cloudflare vs Netlify free plan: hosting that never pauses
- EmailJS 412 “Gmail_API: Invalid grant”: reconnect Gmail
- Resend “You can only send testing emails”: verify a domain
- Supabase Edge Function blocked by CORS policy: 3 causes
- Formspree “Form not found” and other errors: fixes
- Web3Forms errors: “Invalid access key” and 403 explained
- How to add customer reviews to your website for free
- Getform not working? “This form has been deleted” and more
- Next.js contact form not working? 6 errors, reproduced
- Webflow form not sending email? What to check, tested
- FormSubmit not working? “This form needs Activation” fix
- Contact form “TypeError: Failed to fetch”: causes and fixes
- WooCommerce product enquiry form
- Contact Form 7 vs WPForms
- Gravity Forms alternative free
- WordPress contact form block
- 535-5.7.8 Username and Password not accepted (Gmail)
- 535 5.7.3 Authentication unsuccessful: Office 365 SMTP
- Nodemailer “Missing credentials for "PLAIN"”: the fix
- Nodemailer “Greeting never received”: port 465 fix
- Nodemailer SSL “wrong version number”: the port fix
- Nodemailer “self-signed certificate in certificate chain”
- Nodemailer ECONNREFUSED 127.0.0.1:587: missing SMTP host
- SendGrid “authorization grant is invalid”: 401 fix
- Mailgun 401 Forbidden: why the API rejects your key
- “Edge Function returned a non-2xx status code”: the fix
- Next.js “Body exceeded 1 MB limit”: Server Action fix
- Unexpected token '<', "<!DOCTYPE "... is not valid JSON
- “TypeError: Body is unusable”: body has already been read
- Turnstile “timeout-or-duplicate” and other siteverify errors
- Turnstile vs hCaptcha vs reCAPTCHA: speed and size tested
- Judge.me reviews not showing on Shopify: how to fix it
- Judge.me review carousel not showing: how to fix it
- Yotpo reviews not showing on Shopify? Check the app embed
- Loox reviews not showing on product page: how to fix
- Shopify reviews not showing: what to check first
- How to show reviews on Shopify
- GDPR for website forms: what each type of form needs
- WooCommerce reviews not showing: how to fix it
- Stamped.io reviews not showing on Shopify: how to fix it
- Etsy reviews not showing: why and what to do
- Trustpilot widget not loading: how to fix TrustBox
- Yotpo problems in 2026: what merchants report
- Contact Form 7 “error trying to send your message” fix
- Elementor form “Your submission failed because of an error”
- Framer form not sending email or not working: what to check
- Carrd contact form not working: plans, spam and errors
- Google review link not working: what customers see and why
- tawk.to widget not showing on your website: causes and fixes
- How to add questions and answers to your product page
- “Failed to send a request to the Edge Function”: fixes
- Next.js “Failed to find Server Action”: what it means
- Brevo “unauthorized: Key not found” 401: the fix
- Amazon SES “Email address is not verified”: the fix
- Shopify contact form not working: how to fix it
- Judge.me alternative for WooCommerce after the 2025 shutdown
- Free WooCommerce review plugins compared on the free version
- WooCommerce review reminder emails without a paid plugin
- Add Voice Recording to a Website Form
- Contact Form 7 spam: how to stop it
- WPForms not sending email: how to fix it
- Contact form emails going to spam: how to fix it
- HTML form not submitting: how to fix it
- Contact form not working: how to find the fault
- Webflow form spam: how to stop it
- Website form to Notion: how to set it up
- Website form to WhatsApp: what works and what does not
- What 1-star reviews say about AI support chatbots
- Which free form backend gives you the most submissions?
- Elfsight reviews widget not showing? Check the view limit
- Next.js contact form backend vs Server Actions
- Review stars not showing in Google search results
- How to stop duplicate form submissions
- How to see which form leads came from ChatGPT
- What happens when a form webhook fails
- When to send a review request email after an order
- How to collect video testimonials for free
- Add contact form sign-ups to Mailchimp or Klaviyo
- How to migrate from Formspree without losing submissions
- How to get a Google review link for your business
- What is a headless form backend?
- Is it safe to put a form access key in your HTML?
- AI chatbot that answers only from your website
- Minified React error #441 in Next.js
- Squarespace product reviews after Judge.me
- Accessible contact form checklist for WCAG 2.2
- How to ask a client for a testimonial by email
- How to respond to negative reviews, with examples
- 429 Too Many Requests on a contact form
- MCP server for forms in Cursor and Claude
- Can you offer a discount for a review?
- Do EU stores have to say if reviews are verified?
- Webflow form backend options compared
- How to add review schema JSON-LD to a product page
- How to turn a customer review into an Instagram post
- How to make a QR code for Google reviews
- Live chat or chatbot for a small business website
- Why people abandon your contact form halfway
- Which form backend do AI assistants pick? 54 answers
- PHP mail() not sending email, even when it returns true
- What “Failed to fetch” means, tested in three browsers
- 405 Method Not Allowed when you submit a form
- Send a contact form to more than one email address
- What is review syndication, and who needs it?
- How to save HTML form data to a database
- NetworkError when attempting to fetch resource
- Send product reviews to Google Merchant Center
- PHPMailer not working on a live server
- AI review reply generator: does it help?
- React 19 contact form with useActionState
- Astro Actions or a form backend?
- Is no-reply@wixsiteautomations.com legit?
- Where to find the Judge.me review widget code
- AI review summaries: what shoppers actually see
- Photo reviews for WooCommerce, and the GPS inside them
- Review request email templates you can copy
- Reviews in AI search: what ChatGPT and Perplexity cite
- Lead capture form with UTM tracking, built and tested
- Form design best practices, with our own form data
- Client intake form template with file upload
- What is social proof? Meaning and examples
- What is user-generated content (UGC)?
- Benefits of negative reviews for your store
- How to get your first reviews as a new store
- How to use customer reviews in your marketing
- How to get more customer reviews
- React form validation without a library, tested
- jQuery submit form with validation
- reCAPTCHA v3 setup with the server score check
- Shopify social proof that shoppers can check
- HTML file input: accept, multiple, capture and size checks
- How to add hCaptcha to a form, with the server check
- How to add invisible reCAPTCHA to a form
- Bug report form template with browser details
- What the FTC fake reviews rule bans for online stores
- How to show reviews on your homepage
- Do reviews increase sales? What the studies show
- HTML input types and what each one sends
- HTML textarea, tested in a real form
- HTML dropdown menu in a form, tested
- Do reviews help SEO? What Google says and shows
- How to add a review carousel people can read
- Product review examples that help shoppers decide
- Which trust badges actually mean something
- Customer satisfaction survey with CSAT and NPS
- JavaScript FormData and what fetch actually sends
- JavaScript form validation without a library
- Server-side form validation and what it catches
- Email validation in JavaScript, tested on 33 addresses
- Zod form validation with FormData, tested
- Store reviews vs product reviews
- How to send review requests through Klaviyo
- How to tag customer reviews by topic and mood
- Custom review form questions worth asking
- Online reputation management for small businesses
- HTML radio button groups and what they send
- HTML label tag and what screen readers hear
- HTML autocomplete attribute, tested with Chrome autofill
- HTML fieldset and legend, and what disabled leaves out
- Vite contact form that still works after the build
- How to test a contact form, end to end
- How to embed a Google Form, and what it loads
- Customer feedback questions that get real answers
- How to convert a file to base64 in JavaScript
- FilePond with a form backend, and when to skip it
- Bootstrap form validation and server errors
- Tailwind form validation, tested in three browsers
- Donation form in HTML, and where the payment goes
- How to ask for a review in person or by text
- Which review sites matter for your business
- What are customer reviews, and which kinds count
- Online review statistics, checked at the source
- Best review app for Shopify and WooCommerce
- Why Gmail sends your self-hosted mail to spam
- htmx contact form that sends to another domain
- AI form builders tested, from prompt to sent form
- Headless WordPress forms with Contact Form 7, tested
- React Hook Form watch vs useWatch, and what gets sent
- Elfsight widget not working? It vanishes when views run out
- Jotform not sending emails? Check Jotform's bounce list
- Typeform not working? A white box means a blocked script
- Positive review response examples that don't sound copied
- How to remove a Google review when you can't delete it
- Google reviews not showing up? 8 causes to check in order
- Is buying Google reviews illegal? Even a review swap counts
- Which reviews can you hide? A review moderation checklist
- Average star rating: what 4.8 from 5 reviews means
- Reviews on a product page: where and how many to show
- SaaS testimonials: 3 of 27 had a number in them
- Do reviews reduce returns? Not when they're too good
- Testimonial examples for business: what makes one believable
- Testimonial questions to ask clients, by type of business
- Testimonial page design: a page or a section?
- Testimonial advertising rules: what the FTC requires
- Form submission canceled because the form is not connected
- Input type date format dd/mm/yyyy: what you can change
- How to disable textarea resize, or allow only vertical
- How to prevent Enter from submitting a form
- form.submit() vs requestSubmit(): what submit() skips
- Custom HTML checkbox CSS that doesn't break required
- How to reset a form after submit, and what reset() keeps
- Input type number maxlength not working? What to use
- How to create an HTML form, step by step
- Best form builder: free plans and branding, checked
- Best WordPress contact form plugin: 10 free ones compared
- How to increase form conversion rate: start with the count
- Form backend vs form builder: which one do you need?
- WordPress contact form not sending email? 3 plugins tested
- Contact Form 7 webhook? Turning it on switched our email off
- Gravity Forms webhook: what it sends and the URLs it rejects