Hi Hubert, Thanks for your reply first .. but: On Mon, Jul 12, 2004 at 09:32:45PM -0700, Hubert Rabago wrote: > This is really how it's designed to work. For a form to be resubmitted, the > user will have to regenerate the form, maybe by going back two pages, to the > page that was shown *before* the form. As you might already know, this > protects against accidental double submits.
Yes, the problem is that even if the form is regenerated, it is STILL USING THE SAME REQUEST object, which means that the token still stays there. > If you're looking for an alternative, you can, instead of using tokens, use > redirects. This will not protect against double submits, but will allow the > same form to be resubmitted deliberately, while still protecting against > refresh operations. You could try manually removing the token, although I > think that will defeat the purpose of using them. Well, since we need to pass argument to the index page after user creation, so redirect doesn't seem to be possible Thank you again for your detailed reply! -- Layman <[EMAIL PROTECTED]> Ext: 8059 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
