Warning: Undefined array key 'username'

What causes this

You’re accessing an array key that doesn’t exist. PHP 8.0+ throws a warning for this (older versions showed “Undefined index”). This typically happens with $_GET, $_POST, $_SESSION, or any associative array where the key might not be present.

Common scenarios:

• Accessing form data before the form is submitted
• Reading query parameters that aren’t always present
• Assuming an API response has a specific key
• Accessing config values that haven’t been set

Fix 1: Use the null coalescing operator

// ❌ Key might not exist
$name = $_POST['username'];

// ✅ Default value if key doesn't exist
$name = $_POST['username'] ?? 'guest';
$page = $_GET['page'] ?? 1;
$theme = $_COOKIE['theme'] ?? 'light';

This is the cleanest approach for PHP 7+.

Fix 2: Check with isset() first

if (isset($_POST['username'])) {
    $name = $_POST['username'];
    // process the form
} else {
    // show the form
}

isset() returns false if the key doesn’t exist OR if the value is null.

Fix 3: Use array_key_exists() for null values

If the key might exist with a null value and you need to distinguish that from “key doesn’t exist”:

if (array_key_exists('username', $data)) {
    // Key exists (value might be null)
    $name = $data['username'];
}

Fix 4: Set defaults with array_merge

$defaults = [
    'host' => 'localhost',
    'port' => 3306,
    'charset' => 'utf8mb4',
];

$config = array_merge($defaults, $userConfig);
// Now all keys are guaranteed to exist
echo $config['host'];

Fix 5: Validate request data properly

For form handling, validate all expected fields:

$required = ['username', 'email', 'password'];
$missing = array_diff($required, array_keys($_POST));

if (!empty($missing)) {
    echo "Missing fields: " . implode(', ', $missing);
    return;
}

// Now safe to access all fields
$username = $_POST['username'];

How to prevent it

• Always use ?? (null coalescing) when accessing array keys that might not exist
• Validate form/request data at the top of your handler before accessing individual fields
• Use a framework (Laravel, Symfony) that provides request validation out of the box
• In PHP 8.0+, these are warnings by default — consider using error_reporting(E_ALL) during development to catch them early

Related: PHP: Cannot Modify Header Information — Headers Already Sent