double submission when refresh php

Question

I'm trying to correct the issue of double submit in my script. When I press submit it only updates mysql once(which is what I want). However, when I hit refresh it updates mysql again. It seems to ignore the if statement once the refresh button is hit. What would I do to stop this

here is my code

if (isset($_POST['submitButton'])) { 
//do something
 }


<form action = "table.php" method="post">
<label for="submitButton"></label>
<input type="submit" name="submitButton" id="submitButton"
value="Submit Form"/>
</form>

Naftali · Accepted Answer · 2023-04-18T18:39:25.513

7

When you refresh the page - the POST IS SENT AGAIN

Some browsers actually warn you about that happening.

To prevent that I do:

if (isset($_POST['submitButton'])) { 
//do something

//..do all post stuff
header('Location: thisPage.php'); //clears POST
}


<form action = "table.php" method="post">
<label for="submitButton"></label>
<input type="submit" name="submitButton" id="submitButton"
value="Submit Form"/>
</form>

edited Apr 18 '23 at 18:39

answered Aug 16 '11 at 17:07

Naftali

144,921
39
244
303

I'd rather use a csrf-token in the form than creating 2 request for a submit but i have to say it's a rather neat and easy to implement trick. Maybe die(); after the header(); ? – edorian Aug 16 '11 at 23:00

score 5 · Answer 2 · answered Jan 30 '12 at 19:12

I use a session to keep from reposting.

session_start();

 if( isset($_SESSION['your_variable']) && 
     $_SESSION['your_variable'] == $_POST['your_variable'] ){
    // re-post, don't do anything. 
 }
 else{
    $_SESSION['your_variable'] = $_POST['your_variable'];
    // new post, go do something.
 }

Benjamin Dubois · Answer 3 · 2011-08-16T17:32:41.993

2

This is a standard behavior : when you reload the page, if it was posted, your browser replays the same request (with the POST).

To avoid this, you can use a redirection to the same page, with :

 <?php
 header("location:".$mycurrentURl);

This will reload the page, via a get request. This will prevent double posts.

edited Aug 16 '11 at 17:32

answered Aug 16 '11 at 17:09

Benjamin Dubois

971
7
11

score 1 · Answer 4 · answered Aug 16 '11 at 17:09

when you refresh the page. browser post all the data again. so the same thing happens again to overcome this after doing something redirect the browser to same page again once like this

    if (isset($_POST['submitButton'])) { 
         //do something

         header("location:table.php");
    }

Kevin Nelson · Answer 5 · 2014-10-14T17:26:39.970

1

I usually don't worry about this and just rely on the user NOT re-posting unless they want to. However, if you want to forbid it, you can use a nonce.

http://en.wikipedia.org/wiki/Cryptographic_nonce

edited Oct 14 '14 at 17:26

answered Aug 16 '11 at 17:11

Kevin Nelson

7,613
4
31
42

double submission when refresh php

5 Answers5

Linked