sios wrote:What is the correct method to avoid back/refresh issue? How can I kill the $_POST data?
Start a session and store some arbitrary key/value when they first view the form. Once it's submitted, remove that value. That way, before you process the submitted data, you can check for that session value. If it doesn't exist, they either never viewed the form in the first place (e.g. directly posting data to your script) or else they've already submitted data once.