Live data from Hacker News

Double-clicking on the Web

ma.ttias.be

51–60 of 109 posts

Re: Double-clicking on the Web

#51
post #48

Earlier quoted context omitted.

While I agree that you should include a one-time token with all sensitive forms, I don't think that disabling links/submit buttons on the first click is a bad idea in general. It's an easy fix that will immediately prevent most accidental redundant server requests, but as it's a client-side fix it's inherently unreliable. What's wrong though is the author's solution of disabling _all_ links and submit buttons on the…

I like the 500ms timeout as a quick solution. Of course, a common source of duplicate form submissions is when then submission request is taking long (>1000ms) and the user gives the button another click in a little while.

I know, and you could set the timeout higher to prevent these (the button becomes a placebo button that's still clickable but doesn't do anything), but it gets hard to draw a line at which the request really might have failed and the button should be re-enabled. I feel like this is a different problem that needs to be addressed server-side, both with quicker response times and single-use tokens.

Re: Double-clicking on the Web

#52
post #10

Are double click actions still a thing? Windows has had an option for single-click mode since forever, and most users I know use it – mainly because they're used to single click from the web. The remainder and most Mac/Linux users don't even bother and navigate with the keyboard. I can't remember the last time I had to double-click anything, except for text selection.

Really? I would be surprised if anyone I know is even aware of the fact that Windows ever had a single click mode let alone how to turn it on. And the mac users I know certainly don't navigate with the keyboard.

Re: Double-clicking on the Web

#53

Earlier quoted context omitted.

> There's no excuse, but they don't fix it. Browsers exist for my convenience, not yours.

Is a denial-of-service tool so convenient for you?

Thats a poor argument. Literally no one gets DoS'ed by a few guys F5'ing in coordination. If your server is so poorly set up as to allow any small number of IP's to impact it in any way then you are doing it wrong.

When I was getting into nodejs a few years back I wrote DoS script to kill a site that was scraping content from one of my sites and posing it as their own. I made it just for shits n giggles in about 5 minutes and I was surprised when it actually worked, their website just went down.

DoS is and always will be easy.

Re: Double-clicking on the Web

#55
post #36

I was using that Google 3D plot viewer thing the other day and assumed right-click-dragging would do something for me. It didn't, and it occurred to me that the reason we have this is that Microsoft, Apple, or some other microcomputer vendor once decided people were too dumb to know they have more than one finger. And now on the subject of double-clicking, it occurs to me that if the one-finger thing hadn't been the…

I think you'd be less dismissive if you were better informed about your topic.

Re: Double-clicking on the Web

#56
post #28

Earlier quoted context omitted.

It's not being less technical: using double click simply means you did desktop computing in the mid nineties on Windows. Anyone younger simply doesn't have that memory.

Or Macs... the "single click to select, double-click to apply default action" occurs both in Windows and MacOS.

OK I'm wrong. I use a Mac every day and thought they didn't do double click. Apparently it's a somewhat subconscious action.

Re: Double-clicking on the Web

#57
post #55
post #36

I was using that Google 3D plot viewer thing the other day and assumed right-click-dragging would do something for me. It didn't, and it occurred to me that the reason we have this is that Microsoft, Apple, or some other microcomputer vendor once decided people were too dumb to know they have more than one finger. And now on the subject of double-clicking, it occurs to me that if the one-finger thing hadn't been the…

I think you'd be less dismissive if you were better informed about your topic.

?

Re: Double-clicking on the Web

#58
post #3

That reminds me of the way my mother is using a computer. She clicks EVERYTHING twice. No matter if online or offline. That often causes problems. For example if you double-click an icon in the windows taskbar to open an application it opens twice.

I suggest teaching "click once at first and wait a moment; if nothing desired happens, then double-click." It's what I do when I explore the UIs of unfamiliar apps, and seems to work well enough.

Re: Double-clicking on the Web

#59
post #18

HTTP already handles this just fine if you have sensitive forms: your form can include a one-time token which your server validates. If the token has already been used, you don't process the second request. What we definitely shouldn't do (as the author suggests) is disable form submissions on subsequent clicks. What if the first response fails? You'll have to enter the entire form all over again, instead of being ab…

I hate it when people do this. I'd say >30% of my HTTP requests fail on my phone (I have to go into airplane mode and go out of airplane mode about 10 times a day to keep my connection up), so it's really, really annoying when people disable submission because often I do have to try 2-3 times.
Post reply on HN