Chris Faust wrote:
I would suggest that you need to create some kind of transaction ticket. For example, (timestamp + 50 bytes random string so that it's hard to guess). When the user does the transaction, the transaction ticket changes from state 'pending' to state 'accepted' or something.What would you suggest for a situation where a user is entering in their credit card information, using their back button and submitting again and then complaining about a double charge?
Then when the user clicks 'submit' again you know that you must not process the credit card again since the state has become 'accepted'. This way you don't need to break standard browser functionality...
Does this make sense?
Cheers, Jean-Michel.
-- Report problems: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html List etiquette: http://perl.apache.org/maillist/email-etiquette.html
