Redirect and Stop refresh(adding record)

far

I have created this file in order to allow user to input a new record, the script works fine, but after adding a record, if you click the refresh button again the record will add again, i tried adding close connection code, but not seems to be working, how can i clear my form to "" to avoid the duplicate records, also after the submision of the record how can i redirect or load a thank you page.

Thanks.

<?php
session_start();

$errorMessage = '';
if (isset($_POST['txtUserId']) && isset($_POST['txtPassword'])) {
// check if the user id and password combination is correct
if ($_POST['txtUserId'] === 'admin' && $_POST['txtPassword'] === '1111') {
// the user id and password match,
// set the session
$_SESSION['basic_is_logged_in'] = true;

// after login we move to the main page
header('Location: admin.php');
exit;
} else {
$errorMessage = 'Sorry, wrong user id / password';
}
}
?>
<?php
$user = "root";
$pass = "1111";
$db_name = "currency";
$dbcnx = mysql_connect( "localhost", $user, $pass );
if ( !$dbcnx )
   echo( "Couldn't connect to MySQL" );
   mysql_select_db( $db_name , $dbcnx )
   or die ( "Couldn't open $db: ".mysql_error() );
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>
<head>
<title>Currecny System Login</title>
<style>
*{ 	FONT-SIZE: 8pt; 
	FONT-FAMILY: verdana; }

b { FONT-WEIGHT: bold; }

.listtitle 
{ BACKGROUND: #425984; COLOR: #EEEEEE; white-space: nowrap; }

td.list { BACKGROUND: #EEEEEE; white-space: nowrap; }

</style>
</head>
<body onLoad="document.form.username.focus();">
<?php
if(isset($_POST['add']))
{

$countryname= $_POST['countryname'];
$currency = $_POST['currency'];

$query = "INSERT INTO countries (countryname, currency) VALUES ('$countryname', '$currency')";
mysql_query($query) or die('Error, insert query failed');
}
else
{
?>

<center><br><br><br><br>
<table cellspacing=1 cellpadding=5 width="300">
<tr>
<td class=listtitle colspan=3>Add New Field</td></tr>

<form  method="POST">

<input type=hidden name=referer value="/">
<tr>
<td class=list align=left>Country Name:</td>
<td class=list colspan="2"><input name="countryname" type="text" id="countryname"></td></tr>
<tr>
<td class=list align=left>Currency:</td>
<td class=list colspan="2"><input name="currency" type="text" id="currency"></td></tr>
<tr>
<td class=list align=left>Image Path:</td>
<td class=list><input name="txtPassword" type="password" id="txtPassword"></td>
<td class=list><input type="submit" name="findimage" value="Browse"></td></tr>
<tr><td class=listtitle align=right colspan=3><input name="add" type="submit" id="add" value="Add New Country"></td></tr>
</form>
</table>
<?php mysql_close($dbcnx);
}
?>
</center></body></html>

Frederick

You should place your processing code into a different page and then use a header() function to redirect the page afterwards.

header("Location: successful.php");

far

Frederick wrote:
You should place your processing code into a different page and then use a header() function to redirect the page afterwards.

header("Location: successful.php");

Thanks Frederick, but can you slow a bit, you said move the processing code into a different page, I dont understand this part? am still new in this field!!

Frederick

Items like this should never be placed in a page where it is meant for viewing. Refreshing occurs many times depending on the user.
$query = "INSERT INTO countries (countryname, currency) VALUES ('$countryname', '$currency')";
mysql_query($query) or die('Error, insert query failed');

Make a page such a process.php and point your form action to this page. Use the header() for redirect afterwards.

far

Ok, i did create the process.php and it does work fine, but still not sure how to deal with the header thing....!!

Process.php

<?php
// like i said, we must never forget to start the session
session_start();

// is the one accessing this page logged in or not?
if (!isset($_SESSION['basic_is_logged_in'])
    || $_SESSION['basic_is_logged_in'] !== true) {

// not logged in, move to login page
header('Location: login.php');
exit;
}
?>
<?php
$user = "root";
$pass = "1111";
$db_name = "currency";
$dbcnx = mysql_connect( "localhost", $user, $pass );
if ( !$dbcnx )
   echo( "Couldn't connect to MySQL" );
   mysql_select_db( $db_name , $dbcnx )
   or die ( "Couldn't open $db: ".mysql_error() );
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>New Page 2</title>
</head>
<body>
<?php
if(isset($_POST['add']))
{
$countryname= $_POST['countryname'];
$currency = $_POST['currency'];
$query = "INSERT INTO countries (countryname, currency) VALUES ('$countryname', '$currency')";
mysql_query($query) or die('Error, insert query failed');
}
else
{
?>
<?php} ?>
</body>
</html>

newcountry.php

<?php
// like i said, we must never forget to start the session
session_start();

// is the one accessing this page logged in or not?
if (!isset($_SESSION['basic_is_logged_in'])
    || $_SESSION['basic_is_logged_in'] !== true) {

// not logged in, move to login page
header('Location: login.php');
exit;
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>
<head>
<title>Currecny System Login</title>
<style>
*{ 	FONT-SIZE: 8pt; 
	FONT-FAMILY: verdana; }

b { FONT-WEIGHT: bold; }

.listtitle 
{ BACKGROUND: #425984; COLOR: #EEEEEE; white-space: nowrap; }

td.list { BACKGROUND: #EEEEEE; white-space: nowrap; }

</style>
</head>
<body onLoad="document.form.username.focus();">

<center><br><br><br><br>
<table cellspacing=1 cellpadding=5 width="300">
<tr>
<td class=listtitle colspan=3>Add New Field</td></tr>

<form  method="POST" action="process.php">

<input type=hidden name=referer value="/">
<tr>
<td class=list align=left>Country Name:</td>
<td class=list colspan="2"><input name="countryname" type="text" id="countryname"></td></tr>
<tr>
<td class=list align=left>Currency:</td>
<td class=list colspan="2"><input name="currency" type="text" id="currency"></td></tr>
<tr>
<td class=list align=left>Image Path:</td>
<td class=list><input name="txtPassword" type="password" id="txtPassword"></td>
<td class=list><input type="submit" name="findimage" value="Browse"></td></tr>
<tr><td class=listtitle align=right colspan=3><input name="add" type="submit" id="add" value="Add New Country"></td></tr>
</form>
</table>

</center></body></html>

Frederick

<?php
// This is an example of a process page

// CAUTION: always mask you access info

$user = "xxxx";
$pass = "xxxx";
$db_name = "xxxxxxxx";
$dbcnx = mysql_connect( "localhost", $user, $pass );

$countryname= $_POST['countryname'];
$currency = $_POST['currency'];
$query = "INSERT INTO countries (countryname, currency) VALUES ('$countryname', '$currency')";
mysql_query($query) or die('Error, insert query failed');

// redirect back
header("Location: newcountry.php");

?>