well, my experience is: if you put anything online, someone will come and try to skrew it up :/
because of that, I see anything client side just as a "gimmick" and regard all data coming from it as potential dangerous... but helping users is also ok :P Regards > -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auftrag > von Pierre-Yves Saumont > Gesendet: Donnerstag, 28. September 2006 15:51 > An: [email protected] > Betreff: Re: [Wicket-user] progress indicator > > Well, technically, you're right. However, I think we are > speaking of different use cases. My use case is a fair user > wanting to click on an link and not aware that he has to wait > for the result. So he might click a second time if he's > waiting too long. For this use case, we often see a message > that says "Wait for the answer. Do not click twice or your > order (or whatever) will be processed twice". > > In that use case, I think "Ajax" can help. (By the way, it is > client side processing. Nothing to do with Ajax). > > Your use case is more an unfair user trying to screw the > system. In that case, I will of course try to install > protections on the system side, but I will not try to protect > the user. ;-) > > Pierre-Yves > > Korbinian Bachl a écrit : > > it wouldnt work to prevent the user from doing sth. - even > if he has > > JS enabled, he might abuse it... ajax has always be treatet as > > unsecure... and the basic problem the thread started with, cant be > > solved by ajax, it has to be solved by the server checking > the current > > state of the process thats going on... > > > > > > > >> -----Ursprüngliche Nachricht----- > >> Von: [EMAIL PROTECTED] > >> [mailto:[EMAIL PROTECTED] Im Auftrag von > >> Pierre-Yves Saumont > >> Gesendet: Donnerstag, 28. September 2006 13:16 > >> An: [email protected] > >> Betreff: Re: [Wicket-user] progress indicator > >> > >> What wouldn't work? Do you mean the indicating ajax link wouldn't > >> prevent the user to resubmit the form, or are you thinking about > >> another problem? > >> > >> Pierre-Yves > >> > >> Korbinian Bachl a écrit : > >>> depends on the scenario he wants to use it, however, > preventing the > >>> user to send a form just wouldnt work > >>> > >>> regards > >>> > >>>> -----Ursprüngliche Nachricht----- > >>>> Von: [EMAIL PROTECTED] > >>>> [mailto:[EMAIL PROTECTED] Im > Auftrag von > >>>> Pierre-Yves Saumont > >>>> Gesendet: Donnerstag, 28. September 2006 11:29 > >>>> An: [email protected] > >>>> Betreff: Re: [Wicket-user] progress indicator > >>>> > >>>> I guess the question is how to prevent the user to send the form > >>>> twice while the Ajax request is being processed. Or am I wrong? > >>>> > >>>> Pierre-Yves > >>>> > >>>> Korbinian Bachl a écrit : > >>>>> Hi, > >>>>> > >>>>> i dont understand what you mean? - how can a disabled > >>>> onSubmit button > >>>>> stop the user from changing selected values?? if you > plan it ajax > >>>>> like, how can u be secure that the user has JS activated > >> and doenst > >>>>> deactivate it or ignore parts of it (like you can do with > >>>> certain browser plugins) ? > >>>>> > >>>>> basically, a check on a user side (in the browser) is a > >>>> toy, but not a > >>>>> check - you can help the user to fill out forms and tell > >>>> him he shoud > >>>>> do this and that, but you cant force him nor be sure that > >>>> the data hes > >>>>> sending is trustful in any way... > >>>>> > >>>>> Regards > >>>>> > >>>>> > >>>> -------------------------------------------------------------- > >>>> ---------- > >>>>> *Von:* [EMAIL PROTECTED] > >>>>> [mailto:[EMAIL PROTECTED] *Im > >>>> Auftrag von > >>>>> *Nino Wael > >>>>> *Gesendet:* Donnerstag, 28. September 2006 10:54 > >>>>> *An:* [email protected] > >>>>> *Betreff:* [Wicket-user] progress indicator > >>>>> > >>>>> Hi > >>>>> > >>>>> > >>>>> > >>>>> We have a form where we would like to disable the > >> complete form > >>>>> onsubmit so that the user cant change any of his > >>>> selected values and > >>>>> we would like to display a progress meter(it does not > >>>> have to show > >>>>> the actual progress just a gif like the AJAX examples). > >>>> I have been > >>>>> thinking of the AJAX examples but I guess that since > >> we somehow > >>>>> would like to stall the browser its not really a good > >>>> solution, we > >>>>> would have to add all for components again just > >>>> disabled and then on > >>>>> the end of the ajax call add them all again enabled? > >>>>> > >>>>> > >>>>> > >>>>> Whats your 2 centavos on this? > >>>>> > >>>>> > >>>>> > >> > --------------------------------------------------------------------- > >>>> - > >>>>> -- > >>>>> > >>>>> > >> > --------------------------------------------------------------------- > >>>> - > >>>>> --- Take Surveys. Earn Cash. Influence the Future of IT Join > >>>>> SourceForge.net's Techsay panel and you'll get the chance > >> to share > >>>>> your opinions on IT & business topics through brief > >> surveys -- and > >>>>> earn cash > >>>>> > >> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DE > >>>> V > >>>>> DEV > >>>>> > >>>>> > >>>>> > >> > --------------------------------------------------------------------- > >>>> - > >>>>> -- > >>>>> > >>>>> _______________________________________________ > >>>>> Wicket-user mailing list > >>>>> [email protected] > >>>>> https://lists.sourceforge.net/lists/listinfo/wicket-user > >>>> -------------------------------------------------------------- > >>>> ----------- > >>>> Take Surveys. Earn Cash. Influence the Future of IT Join > >>>> SourceForge.net's Techsay panel and you'll get the > chance to share > >>>> your opinions on IT & business topics through brief > surveys -- and > >>>> earn cash > >>>> http://www.techsay.com/default.php?page=join.php&p=sourceforge > >>> &CID=DEVDEV > >>>> _______________________________________________ > >>>> Wicket-user mailing list > >>>> [email protected] > >>>> https://lists.sourceforge.net/lists/listinfo/wicket-user > >>>> > >>> > >>> > >>> > >> > >> -------------------------------------------------------------- > >> ----------- > >> Take Surveys. Earn Cash. Influence the Future of IT Join > >> SourceForge.net's Techsay panel and you'll get the chance to share > >> your opinions on IT & business topics through brief surveys -- and > >> earn cash > >> http://www.techsay.com/default.php?page=join.php&p=sourceforge > > &CID=DEVDEV > >> _______________________________________________ > >> Wicket-user mailing list > >> [email protected] > >> https://lists.sourceforge.net/lists/listinfo/wicket-user > >> > > > > > > > > > > > -------------------------------------------------------------- > ----------- > Take Surveys. Earn Cash. Influence the Future of IT Join > SourceForge.net's Techsay panel and you'll get the chance to > share your opinions on IT & business topics through brief > surveys -- and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge &CID=DEVDEV > _______________________________________________ > Wicket-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/wicket-user > ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Wicket-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/wicket-user
