ZollerWagner
Technical User
I'm developing a site that has several PHP features. One of them allows a sender to mail an e-card to a friend. I do a lot of input testing to be sure the user inputs are clean and safe. At each step, I give the user the opportunity to go back and revise their inputs, or to start over.
On the first page I take their inputs, approve or edit them for security, and then send them to a preview page. Because I need to manipulate the data inputs first on the input page, I maintain state with their data by creating a session.
I haven't figured out a way to send the data by POST because I test/change it with PHP after they click on SUBMIT. Their inputs are no longer used, so simple posting doesn't seem likely.
I can get this to work, but it's not pretty.
The main issue is that if the user wants to return to the input page from the preview page, the browser (IE) sometimes tells them that they have to press "refresh" to resubmit the data get.
This may be a clue. It seems to happen only if they had to edit the data on the input page because it doesn't meet security tests. (Let me be clear. This is when they had to edit the inputs before they ever leave the input page.) The refresh message doesn't seem to show up if there was no problem on the input page. At any rate, this is really bad for usability. It makes me look like I messed up! Maybe I did. Any idea what's up? Is this normal or do I have a bug?
Thanks.
On the first page I take their inputs, approve or edit them for security, and then send them to a preview page. Because I need to manipulate the data inputs first on the input page, I maintain state with their data by creating a session.
I haven't figured out a way to send the data by POST because I test/change it with PHP after they click on SUBMIT. Their inputs are no longer used, so simple posting doesn't seem likely.
I can get this to work, but it's not pretty.
The main issue is that if the user wants to return to the input page from the preview page, the browser (IE) sometimes tells them that they have to press "refresh" to resubmit the data get.
This may be a clue. It seems to happen only if they had to edit the data on the input page because it doesn't meet security tests. (Let me be clear. This is when they had to edit the inputs before they ever leave the input page.) The refresh message doesn't seem to show up if there was no problem on the input page. At any rate, this is really bad for usability. It makes me look like I messed up! Maybe I did. Any idea what's up? Is this normal or do I have a bug?
Thanks.