I like adding these lines to applications like this, just for this reason.  So 
that users can't cause bad things to happen by using the back button.

<!--- set headers to prevent the page from be cached by the browser --->
<cfheader name="expires" value="#now()#">
<cfheader name="Cache-Control" value="no-cache">
<cfheader name="Pragma" value="no-cache">

Causes any page with these headers, to not be cached so that they can not be 
reached with the back button.

--------------
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA
 
"C code. C code run. Run code run. Please!"
- Cynthia Dunning

....-----Original Message-----
....From: Casey C Cook [mailto:[EMAIL PROTECTED]
....Sent: Friday, March 18, 2005 8:24 AM
....To: CF-Talk
....Subject: RE: Ideas - Your Help Needed
....
....We had a situation where a manager would enter a pay increase for
....employee
....A but it would save the record into employee B record. Basically what was
....happening is they would enter employee B make some changes to the form,
....change their mind, click the back button a couple times to employee A
....record and hit submit. Well, the session information from employee B was
....still hanging around and was insert into employee A record. Maybe
....something like this could have occurred, he entered a different name,
....changed his mind went to a different screen and saved some form contents
....and it saved the bogus name.
....
....Thanks,
....CC
....-------------------------------------------------------------------------
....---------------
....This is a PRIVATE message. If you are not the intended recipient, please
....delete without copying and kindly advise us by e-mail of the mistake in
....delivery. NOTE: Regardless of content, this e-mail shall not operate to
....bind CSC to any order or other contract unless pursuant to explicit
....written agreement or government initiative expressly permitting the use
....of
....e-mail for such purpose.
....-------------------------------------------------------------------------
....---------------
....
....
....
....
....
...."Gavin Brook" <gavin.brook
[EMAIL PROTECTED]>
....03/18/2005 08:59 AM
....Please respond to cf-talk
....
....
....        To:     CF-Talk <[email protected]>
....        cc:
....        Subject:        RE: Ideas - Your Help Needed
....
....
....No, the key is unique and not editable. The transactions are all
....complete.
....
....
....-----Original Message-----
....From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
....Sent: 18 March 2005 15:37
....To: CF-Talk
....Subject: RE: Ideas - Your Help Needed
....
....
....Just as a check I may have misunderstood but are you allowing end users
....to
....update the key in the database? Also is everything that needs to be in a
....transaction definitely in a transaction?
....
....Kola
....
....> -----Original Message-----
....> From: Gavin Brook [mailto:[EMAIL PROTECTED]
....> Sent: 18 March 2005 13:08
....> To: CF-Talk
....> Subject: RE: Ideas - Your Help Needed
....>
....> Definitely. I have reviewed my code and had other developers review it
....> too, just to be sure.
....>
....> Is there any possibility of CFMX or SQL doing this?? I've searched and
....> cannot find anything.
....>
....> -----Original Message-----
....> From: Adrian Lynch [mailto:[EMAIL PROTECTED]
....> Sent: 18 March 2005 13:03
....> To: CF-Talk
....> Subject: RE: Ideas - Your Help Needed
....>
....>
....> Stay away from accusations, say that all the evidence points to a
....> mistake on their part.This way they may be less defensive. Also double
....> check that your
....> code is solid.
....>
....> Ade
....>
....> -----Original Message-----
....> From: Michael Traher [mailto:[EMAIL PROTECTED]
....> Sent: 18 March 2005 12:52
....> To: CF-Talk
....> Subject: Re: Ideas - Your Help Needed
....>
....>
....> If your client contact is non technical, you may just need to talk
....> them through the evidence very carefully so they can understand the
....> sequence of events as you do.
....>
....> Maybe you could should them as example of entering data and changing
....> data and then show them the log records that are created from the
....> example.
....>
....> Mike
....>
....>
....> On Fri, 18 Mar 2005 12:42:01 -0000, Gavin Brook
....> <[EMAIL PROTECTED]>
....> wrote:
....> > Hi All,
....> >
....> >  I've got a little bit of a problem and I hope that you guys would
....> > be able to give me advice or shed a little light on a situation I
....> > have....
....> >
....> > The Setup
....> > 1xApplication Server
....> > - Windows 2003 Web Edition
....> > - CFMX 6.1 Standard, all patches
....> >
....> > 1xDatabase Server
....> > - Windows 2003 Standard Edition
....> > - SQL Server 2000 SP3a
....> >
....> > This setup is running an application that our company wrote to store
....> > data relating people. This information is entered through a dynamic
....> > form which
....> is
....> > configured through an admin interface. The whole application has
....> > been developed using Mach-II. The system has been live for a year
....> > now and was thouroughly tested by all parties before go live. There
....> > have been a couple of bugs since, but the code has been unchanged
....> > and stable for at 8months now.
....> >
....> > The problem is this. We have been getting reports of "data
....> > corruption" on
....> a
....> > very small number of forms. I have investigated this "corruption".
....> > The system logs who made what changes to the system to provide an
....> > audit trail for each form. The audit trail shows users have made the
....> > "corrupt" changes to the form and I presented this to the client.
....> > They will not accept this response. I'll give you an example, a name
....> > had been changed from one to another. I checked the live database
....> > and a backup and they both show that
....> a
....> > user changed the name. The user insists that he did not change the
....> > name.
....> >
....> > I cannot see in light of this evidence and problem with my code or
....> > the system. My question to the forum is basically, is there anything
....> > I'm missing?
....> >
....> > Sorry for the longwinded explanation, but I feel like I'm banging my
....> > head against a wall! Any ideas you might will be greatly
....> > appreciated.
....> >
....> > Thanks in advance,
....> >
....> > Gavin
....> >
....> >
....>
....>
....>
....>
....>
....>
....
....
....
....
....
....

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:199360
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to