I want to bring up another issue.

The default behavior of RequestProcessor is to save everything into a new
ActionForm then do the validation. If token is invalid, why should we bother
populating the ActionForm at all?
 
Regards,
 
 
PQ
 
"This Guy Thinks He Knows Everything"
"This Guy Thinks He Knows What He Is Doing"

-----Original Message-----
From: David Graham [mailto:[EMAIL PROTECTED]] 
Sent: January 31, 2003 3:55 PM
To: [EMAIL PROTECTED]
Subject: RE: proper use of back button -- design patterns

The tokens are used for the user clicking the back button and trying to 
submit the form again.  What you describe would have to occur if the user 
clicked the submit button twice.  So, use js to prevent the double clicking 
and tokens to be sure the form is not submitted twice.

David






>From: "Espey, John" <[EMAIL PROTECTED]>
>Reply-To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
>To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
>Subject: RE: proper use of back button -- design patterns
>Date: Fri, 31 Jan 2003 15:24:37 -0500
>
>The javascript would be there as the first line of defense because the 
>action will only be called once, and the submission will go through 
>(assuming they do not have jscript turned off of course).  If an error 
>occurs in that submission, the appropriate error handling will occur.
>
>Contrast this to the situation where I check the token and forward 
>somewhere else.  I don't know what happened in the first action submission.

>  It could have been successful, it could have caused errors, the user will

>have no idea.  All they will know is that they double submitted.  They 
>could have kicked off a long asynchronous process, but because they were 
>forwarded to "badToken", they decide to go kick it off again.  Do you see 
>now my issue with the token checking?  It seems like it really doesn't buy 
>you a whole lot because you can't cancel the fact that the first submission

>cause an action to execute.
>
>       -----Original Message-----
>       From: David Graham [mailto:[EMAIL PROTECTED]]
>       Sent: Fri 1/31/2003 3:07 PM
>       To: [EMAIL PROTECTED]
>       Cc:
>       Subject: RE: proper use of back button -- design patterns
>
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]


_________________________________________________________________
Tired of spam? Get advanced junk mail protection with MSN 8. 
http://join.msn.com/?page=features/junkmail


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to