News for hackers. Stuff that matters.

A comment on Ask HN: Is it still too hard to allow “back” buttons on a banking website?.

Re:Ask HN: Is it still too hard to allow “back” buttons on a... by nailer on Monday November 16, 2015 @05:02AM (#10573547)
The back button exists, banks can not refuse to allow its use. All they can do is warn against its use.

Have a unique hidden input for every form. If a user goes back, regenerate the form.

If a form is somehow resubmitted, print a nice message saying saying that transaction was already submitted.

[ Parent | on HN ]
Re:Ask HN: Is it still too hard to allow “back” buttons on a... by 7Z7 on Monday November 16, 2015 @06:27AM (#10573827)
My bank immediately logs me out if I hit the back button (instead of using their "go back" link) at any time during a logged-in session. That's whether I'm making a payment, looking at my statements, setting up direct-debits etc, or just sitting ambiently on the home-screen. It's incredibly annoying.
[ Parent | on HN ]