Question

I wonder what are the techniques i can use to avoid users to post form twice when they refresh page and chose submit again?

e.g. i have form inside regiter.php and process it as well inside register.php.

1st i could process in another file e.g. register_process.php and redirect to register.php, but then i have to create about 20 new pages and relocate a lot of code, i dont want that option.

2nd i could play with headers i dont remember exact trick but had some bad experience with that – users seen old data on page after refreshing it…

3rd i could just redirect upon success to some dummy.php and from dummy.php jump back to register.php then even if they refresh page browser would not re-post, however it does not protect against them using back button and choosing re-post, i know i could expire page, but i find that annoying experience for me and probably other users to see page expired error.

4th use some unique “access key” for each form once page loaded that will post with form and once used cannot be reused, however i kind of struggle with logics of that feature. how do know key was used without storing it in MySQL DB, i think time based accesis not great either because some users can take long between page open and form submit.

I need more suggestions how to avoid users reposing form again.

Answer 1

Try this:

<?php
session_start();
if( strcasecmp($_SERVER['REQUEST_METHOD'],"POST") === 0) {
  $_SESSION['postdata'] = $_POST;
  header("Location: ".$_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING']);
  exit;
}
if( isset($_SESSION['postdata'])) {
  $_POST = $_SESSION['postdata'];
  unset($_SESSION['postdata']);
}

This will basically save the POST data and cause the browser to re-request as a GET request.