kaled - 7:03 pm on Nov 28, 2010 (gmt 0)
The action attribute identifies the form processor - it may also include configuration parameters.
A form processor is much like a console program. It takes as its input the form data and outputs the HTTP headers and the html page that follows.
When the GET method is used, all data is passed by URL which is passed as an environment variable.
When the POST method is used, data is passed via the program input stream.
There is no redirection. It is not a security measure. If you want to write your own form processor, you'll need to learn a CGI language such as Perl.
Hope this helps,