Page Refreshing

[Cless]

Hi. What do you think would be the best method of stopping some from refreshing a page with POST data? Lately, some idiot has been refreshing pages with POST, so it keeps creating rows and stuff.

 

Thanks.

[benjaminbeazy]

automatically redirect after processing mysql input using header()

 

if you wanna be really sure, add a time log that disallows an insert from the same ip and such before a certain amount of time, or something like that

[Cless]

Ah. I've never heard of that command. Could you please give a little explanation on how to use it?

[me102]

You could use cookies, make a cookie and make it expire when you want to allow the person to insert more data.

[Cless]

Yeah. I suppose. But for this, I need the user to be able to input data immediately.

[TheFilmGod]

Use session. After the post occurs make php set a variable like $post = "done";

 

Then on the post page have a conditional

 

if ($post == "done") {

 

header() }

 

else {

 

show form...

 

}

 

 

[Cless]

That's what I tried, however, if you refresh, the page sends the POST data again, thus, it's basically the same as clicking the button.

[TheFilmGod]

clear the post data after the script is done. Unset $_post['user'] , something like that! Would that work?

[Cless]

Ah, that will probably work. I'll see if it does. I was wondering how to unset POST data anyways. ;p

[DeadEvil]

put this after inserting record to vanished $_POST variable..

 

header ('location: pagename.php');

[Cless]

Hmm... I can't figure out where that would go. Do you know where it would go in this?:

 

<?PHP

//Include Cookie File
include("cookie1.php");

//Include Top File
include("top2.html");

//Include Submit File
include("submit.html");

//Display Description And Content
echo "<hr>
<b>-Promotional Pokémon-</b><br />
<hr>
<small>Sometimes, Staff will be nice and give you a Promotional (Promo) Pokémon. They are free. Pokémon 
obtained will be automatically sent to your Box.</small><br /><br />";

//Set Variables
$GP_Submit= $_POST['GP_Submit'];

if(!$GP_Submit)
{
if($GotPromo=="Yes")
{
echo "Sorry, $Username, you have already obtained the current Promotional Pokémon, $PromoName.";
}
else
{
echo "The current Promotional Pokémon is...<br /><br />

<img src='/IMG/$Promo1/$Promo2/$Promo3/$Promo'><br />
<b>$PromoName</b><br /><br />

<form method='POST'>
<input type='submit' id='sbt_btn' name='GP_Submit' class='forminput' value='Obtain' onclick='hide_btn(this);' />
<span id='submit_btn_msg' style='display:none'>Loading...</span>
</form>";
}
}
//Otherwise, Submit Data
else
{
echo "Promotional Pokémon successfully obtained!<br /><br />";
$AddPoké="Yes";
$AddPoké1=$PromoName;
$AddPoké2=$PromoGender;
include("AddPoke.php");
mysql_query("UPDATE Users SET Promo='Yes' WHERE Username='$Username'");
unset($GLOBALS['_POST']['GP_Submit']); 
}

//Include Bottom File
include("bottom2.html");

?>

 

Thanks.

 

[DeadEvil]

above statement of else

[Cless]

Like that?:

 

<?PHP

//Include Cookie File
include("cookie1.php");

//Include Top File
include("top2.html");

//Include Submit File
include("submit.html");

//Display Description And Content
echo "<hr>
<b>-Promotional Pokémon-</b><br />
<hr>
<small>Sometimes, Staff will be nice and give you a Promotional (Promo) Pokémon. They are free. Pokémon 
obtained will be automatically sent to your Box.</small><br /><br />";

//Set Variables
$GP_Submit= $_POST['GP_Submit'];

if(!$GP_Submit)
{
if($GotPromo=="Yes")
{
echo "Sorry, $Username, you have already obtained the current Promotional Pokémon, $PromoName.";
}
else
{
echo "The current Promotional Pokémon is...<br /><br />

<img src='/IMG/$Promo1/$Promo2/$Promo3/$Promo'><br />
<b>$PromoName</b><br /><br />

<form method='POST'>
<input type='submit' id='sbt_btn' name='GP_Submit' class='forminput' value='Obtain' onclick='hide_btn(this);' />
<span id='submit_btn_msg' style='display:none'>Loading...</span>
</form>";
header ('location: pagename.php');
}
}
//Otherwise, Submit Data
else
{
echo "Promotional Pokémon successfully obtained!<br /><br />";
$AddPoké="Yes";
$AddPoké1=$PromoName;
$AddPoké2=$PromoGender;
include("AddPoke.php");
mysql_query("UPDATE Users SET Promo='Yes' WHERE Username='$Username'");
unset($GLOBALS['_POST']['GP_Submit']); 
}

//Include Bottom File
include("bottom2.html");

?>

[DeadEvil]

like this one..

//Otherwise, Submit Data
else {
header ('location: pagename.php');
...

[Cless]

I tried it, didn't work. :S

 

I get this error message:

 

Warning: Cannot modify header information - headers already sent by (output started at /usr/export/www/vhosts/funnetwork/hosting/tpmrpg/top2.html:148) in /usr/export/www/vhosts/funnetwork/hosting/tpmrpg/promo.php on line 44

[DeadEvil]

its because of the include and echo... ok try this one

 

<?
//Include Cookie File
require_once("cookie1.php");
//Include Top File
require_once("top2.html");
//Include Submit File
require_once("submit.html");

//Display Description And Content
/*echo */
$content = "";
$content .= "<hr>
<b>-Promotional Pokémon-</b><br />
<hr>
<small>Sometimes, Staff will be nice and give you a Promotional (Promo) Pokémon. They are free. Pokémon 
obtained will be automatically sent to your Box.</small><br /><br />";

//Set Variables
$GP_Submit= $_POST['GP_Submit'];

if(!$GP_Submit)
{
if($GotPromo=="Yes")
{
$content .= "Sorry, $Username, you have already obtained the current Promotional Pokémon, $PromoName.";
}
else
{
$content .= "The current Promotional Pokémon is...<br /><br />

<img src='/IMG/$Promo1/$Promo2/$Promo3/$Promo'><br />
<b>$PromoName</b><br /><br />

<form method='POST'>
<input type='submit' id='sbt_btn' name='GP_Submit' class='forminput' value='Obtain' onclick='hide_btn(this);' />
<span id='submit_btn_msg' style='display:none'>Loading...</span>
</form>";
header ('location: gotopagename.php');
}
}
//Otherwise, Submit Data
else
{
$content .= "Promotional Pokémon successfully obtained!<br /><br />";
$AddPoké="Yes";
$AddPoké1=$PromoName;
$AddPoké2=$PromoGender;
include("AddPoke.php");
mysql_query("UPDATE Users SET Promo='Yes' WHERE Username='$Username'");
unset($GLOBALS['_POST']['GP_Submit']);
header ('location: gotopagename.php');
}

print $content;

//Include Bottom File
require_once("bottom2.html");
?>