Session Help (Important)

[IMP_TWI]

So I've read a lot of threads and sites with different opinions and stuff on "sessions" but none really give any good details on what to actually do.

My problem is I need to stop people from being able to refresh or use "auto refresh" to continuously send multiple queries over and over to the DB. I heard sessions made it possible to do this but need help or at least guidance to know what to add to my script . Any help would be appreciated. 🙂

[foyer]

Any basic session tutorial should teach you how to use sessions like so:

start_session();

if ($submit == 'refresh') {
      $_SESSION['refresh'] = true;
}

if (isset($_SESSION['refresh']))
      echo 'You already refreshed this page';

[IMP_TWI]

I tried using:

session_start();

if ($_SESSION['refresh'] > 0)
{
echo "You have already submitted data";
exit;
}

But once I click "submit" it doesn't let me get back to the actual page. What I'm trying to do is make it to where if you click "submit" it'll let you get to the same page it just won't let you refresh the page which would duplicate the query.

The option basically has a "submit" box which lets them update a profile> So when they click "Submit" it'll stay on that page but just updates their profile information. But when I use that session input it only lets you submit once then doesn't allow you to change it which isn't what I was trying to do.

[bretticus]

You need to ignore the check when somebody presses the submit button. You'll also need to get rid of the session variable when they navigate away form the page (you cannot ensure this will happen because the user can simply type in a new URL.)

<?php
// page you do not want refreshing on.
session_start();
if ( isset($_POST['YourSubmitButton']) ) {
	//do not check session when button pushed.
        unset($_SESSION['refresh']);
}
elseif ($_SESSION['refresh'])
{
	echo "You have already submitted data";
	exit;
} else {
	$_SESSION['refresh']==true;
}

// all other pages
session_start();
unset($_SESSION['refresh']);
?>

Possibly not "the solution" but it should point you in the right direction hopefully.