help!!!

[stevesweetland]

ok, iv got a site. you buy products, and it uses a well known credit checking agency to process the payment. works like thus :

1. log in
2. get credit card details
3. check details and send order to credit card agency

4a. order successful
4b. order not succesful

the agency then forwards to either step 4a or 4b.

i got a problem

people are getting to 4a), and then hitting the back button, internet explorer jumps them to 3).

They are hitting 'retry' to re-post the values.
3) checks the basket to see what it needs to send, finds nothing.
3) is sent several variables, including 'amount' which it posts to the agency.

the user gets charged twice, an order is generated in 3), but when they reach 4a), and an email confirmation is sent, the order is empty, as it would be because 3) could find no items in the basket.

i need to stop the user, either hitting 'back'
or i need to stop 3) sending to secpay again (bear in mind that it is possible that in one session, a user may buy the same product again)

[lobo235]

I don't know if this will work in you situation but I have run into the same problem in some of my scripts and I use the following method to avoid it:

<?php
include 'common.php';
if ($_POST['submit'] == "Submit" && !empty($_POST['company_name'])) {
	add_data($_POST['company_name'],$_POST['state']);
	header("Location: success.php");
} else {
	header("Location: failed.php");
}
?>

What this does is sit between your submit page and your results page and it sends the data without ever outputting to the browser. So when you use the header() function it will just forward you to the next page. In my experience when the user presses "back" they don't get a message about resubmitting the form data, even if they refresh the page or try to go forward again. Let me know if this helps.

lobo235
The Barlow's Recipes