En Mon, 28 Jan 2008 19:32:45 -0200, [EMAIL PROTECTED]  
<[EMAIL PROTECTED]> escribió:

> 1. yes i've tried that technique but its annoying, the user can easily
> stop the redirection and not "elegant".
>
> 2. yes i'm aware of that, however what i've mentioned above is just an
> example, it's actually way more serious.

See this sequence:

User POSTs a form
                        Web app processes the form.
                        Web app updates its internal state.
                        Web app don't output anything, and finishes the POST 
handling with a  
redirect (implicit GET)

Browser receives the redirect and issues a GET request
                        Web app returns content

The important thing is that a POST request *never* returns content, always  
redirects. All content is retrieved using GET.

-- 
Gabriel Genellina

-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to