Re: Prevent Brower From Going Back To Credit Card Page

Hi Joe,

I have found that while you can put some features in place to make a
site user friendly there are many ways a form can be submitted more than
once or even from someplace other than your server.  

So for me the problem is not how to prevent the back button but how do I
know that the form submission is valid. 

What I have done is implement a ticket process where requests have
unique tickets.

Example:
- CC from is displayed the system issues a unique ticket logs that the
ticket has been issued and who it was issued to
- When the pages is submitted the check to make sure the ticket is not
has not been processed the ticket and process the results.
- There are many options for what you can do when there is an invalid
ticket but at this point is not vital to the integrity of the
application.  

I have found this to be an effective way to prevent processing multiple
form submissions as well as open up some logging and audit trail
options.

HTH

Gregory Jones
Web Systems Developer

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of Joe Giusto II
Sent: Wednesday, January 25, 2006 4:32 PM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] Prevent Brower From Going Back To Credit Card Page

I am trying to prevent users from using the Back button in the web
browser
to get back to the page where the credit card number was entered.  Or
alternatively, be able to erase that page from the history log or back
button log.

The closest I have come is with this JavaScript, which will throw the
page
forward again when the user hits the back button.

</script><script
language="JavaScript">javascript:window.history.forward(-1);</script>

But does not prevent them from using the drop down arrow on the back
button
to go back several pages to get to it.

I realize the script will work if I put it on each page, but I need to
allow
them to go back and make changes until the final order page is accepted
or
rejected.  That is when I write out a confirmation page with the script
in
it.