Re: Form submit hash keys

23-02-2009 11:44]:Jason wrote:
> Instead, would it make sense to just redisplay the page, with the submitted data
> intact, and a message to telling the user that their data was*not*  submitted
> and to try again?

"... with submitted data intact,... their data was *not* submitted.."

I'm sure that is not literally what you mean. How do you have the 
redisplaying in mind?

the hash key, as we use it, just confirms that the form exit point 
(submit) pairs up with the entry point (generating it), so we get the 
two phase submit. If those two phases still pair up, security is not 
affected.

marcel

-- 
Marcel van der Boom -- http://hsdev.com/mvdb.vcf
HS-Development BV   -- http://www.hsdev.com
So! webapplicaties  -- http://make-it-so.info
Cobra build site    -- http://cobra.mrblog.nl