Php wrote:
> And you can also used a php variable to detect multiple submit:

Even better would be using a token which you give to the user when the form
is displayed.  That way they can't accidentally submit the form on first
entry to the site (and believe me, this can happen, because Konqueror
occasionally remembers a form submission page was in its window the last
time it was run, and tries to reload the page!)

You would generate a random number during the process of displaying the
form, then store that random number into the user's session under that
form's ID.  The number would have to be put into a hidden form field in the
HTML as well.

Then when they submit, you compare the value they send with the value you
have stored in their session.

The frameworks on Java like Struts can automate this.  Perhaps that MVC.PHP
which claims to be a port of Struts can also automate it.

TX


-- 
'Every sufficiently advanced technology is indistinguishable from magic' -
Arthur C Clarke
'Every sufficiently advanced magic is indistinguishable from technology' -
Tom Graves

             Email: Trejkaz Xaoza <[EMAIL PROTECTED]>
          Web site: http://xaoza.net/trejkaz/
         Jabber ID: [EMAIL PROTECTED]
   GPG Fingerprint: 9EEB 97D7 8F7B 7977 F39F  A62C B8C7 BC8B 037E EA73

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to