I am reading a djangobook and get questions about HttpResponseRedirect and render_to_response.
suppose I have a contact form, which posts data to confirm view. It goes through all the validation and database stuff. Then, as a usual way, I output the html with
return render_to_response('thank_you.html',
dict(user_code = user_code),
context_instance=RequestContext(request))
However, the book suggested “You should always issue a redirect for successful POST requests.” because if the user “Refresh” on a this page, the request will be repeated. I wonder what’s the best way to send the user_code along through HttpResponseRedirect to the thank_you.html.
Pass the information in a query string:
Or use a session variable.
The problem with a query string is that the user can see the data.