r.params is the most common way, though that merges the form data from the body with the data from the query string. You can use r.POST if you only want the form data submitted in the request body, or r.GET if the form's action is set to GET and the data is submitted in the query string of the request.