When a user tries to log in to my site, his user name and password are sent as POST variables. When the page loads, I get the variables, process them and decide whether log in was successful or not. Then I render my page containing a message informing the user of their success or failure to log in.
My problem is that if the user hits F5 or refresh, the browser prompts them to resend the log in data. Is there a way to avoid it without reloading the page? Some javascript maybe? If not, then I can send a header to reload the page, but how would I display the message to the user?
Right now I have a user_message object containing an array of information to show the user on page load.
You should redirect to the new page. This way when the user refreshes the page there will be no POST variables.
Where the second arrow is the redirect.