Stop user from using the back button during registration

[JoelRocks]

Hello guys,

 

I have a fully working registration system, it follows the following three stages:

 

• Registration - the user enter the details
  
• Authentication - the details are validated and verified
  
• Submitted- the correct details are added to the database
  

 

Problem is these are three seperate pages, once the user has been added to the database how can i stop them from simply clicking back and adding the details again?

 

Tried a HTTP Refer, only setting it from the registration page, makes the coding more secure but still giving me a head ache

 

Cheers,

 

Joel

[ViN86]

well, you dont want multiple entries anyways.  so just add code to check the entered info and make sure it's not in the database.  if it's not there, add it, otherwise if it is, tell them that the info exists already and they must specify new user information.

 

theres a way to prevent duplicate entries in MySQL as well, however, that would not necessarily spit out a good looking error to the user.  itd be better to either...

 

- write your own code to check the DB

 

OR

 

- determine if there are MySQL errors, interpret the error code, then tell the user what happened

 

EDIT:  one more thing, you only need to do this right before the info is added to the database.  i mean, it doesnt matter if someone has duplicate information in the text fields as long as you dont try to add it to the db

[JoelRocks]

No no,

 

There are 3 seperate pages, starting with http://www.remotepanzer.com/Joel/register.php. This is the main page and then you have 2 different pages after that, try registering, see what you think.

 

[ViN86]

just check to see if the username or email exists in the database before it is inserted.

 

it doesnt matter how many pages there are, there should be one INSERT query.  just  SELECT * FROM table WHERE username='$username' and a SELECT* FROM table WHERE email='$email' queries and if they return something, then stop the INSERT statement from being called.

[jcombs_31]

I don't understand why you have to show them what they just entered and make them click another button.  Too many steps.  Just have the form, validate it, if they complete it successfully, then send them somewhere with a header

 

if(user passes test)
header("Location: mypage.php");

[Crew-Portal]

use

//Login Stuff Here First Page!

if ($login = TRUE){

//Login Stuff 2 page

}

        if ($login2 == TRUE){

        //Login Stuff 3 page

        Header ('homepage.php');

        }

else { echo 'You Did Not Enter All The Fields Correctly'; }