>>One thing though, if the values are showing up in the url then your form itself must be using GET, otherwise they wouldn't show in the URL.
I thought it was clear in my initial post that the form was indeed submitted using POST. and of course I do validate the values received. The problem is when the user resubmits it from his browser using GET (probably not even being aware of it). I can detect this situation, my question was "What would be the best do in this eventuality" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:326281 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
