Earlier quoted context omitted.
While I agree that you should include a one-time token with all sensitive forms, I don't think that disabling links/submit buttons on the first click is a bad idea in general. It's an easy fix that will immediately prevent most accidental redundant server requests, but as it's a client-side fix it's inherently unreliable. What's wrong though is the author's solution of disabling _all_ links and submit buttons on the…
I like the 500ms timeout as a quick solution. Of course, a common source of duplicate form submissions is when then submission request is taking long (>1000ms) and the user gives the button another click in a little while.
Double-clicking on the Web
51–60 of 109 posts
Re: Double-clicking on the Web
#52Are double click actions still a thing? Windows has had an option for single-click mode since forever, and most users I know use it – mainly because they're used to single click from the web. The remainder and most Mac/Linux users don't even bother and navigate with the keyboard. I can't remember the last time I had to double-click anything, except for text selection.
Re: Double-clicking on the Web
#53Earlier quoted context omitted.
> There's no excuse, but they don't fix it. Browsers exist for my convenience, not yours.
Is a denial-of-service tool so convenient for you?
When I was getting into nodejs a few years back I wrote DoS script to kill a site that was scraping content from one of my sites and posing it as their own. I made it just for shits n giggles in about 5 minutes and I was surprised when it actually worked, their website just went down.
DoS is and always will be easy.
Re: Double-clicking on the Web
#54Re: Double-clicking on the Web
#55I was using that Google 3D plot viewer thing the other day and assumed right-click-dragging would do something for me. It didn't, and it occurred to me that the reason we have this is that Microsoft, Apple, or some other microcomputer vendor once decided people were too dumb to know they have more than one finger. And now on the subject of double-clicking, it occurs to me that if the one-finger thing hadn't been the…
Re: Double-clicking on the Web
#56Earlier quoted context omitted.
It's not being less technical: using double click simply means you did desktop computing in the mid nineties on Windows. Anyone younger simply doesn't have that memory.
Or Macs... the "single click to select, double-click to apply default action" occurs both in Windows and MacOS.
Re: Double-clicking on the Web
#57I was using that Google 3D plot viewer thing the other day and assumed right-click-dragging would do something for me. It didn't, and it occurred to me that the reason we have this is that Microsoft, Apple, or some other microcomputer vendor once decided people were too dumb to know they have more than one finger. And now on the subject of double-clicking, it occurs to me that if the one-finger thing hadn't been the…
I think you'd be less dismissive if you were better informed about your topic.
Re: Double-clicking on the Web
#58That reminds me of the way my mother is using a computer. She clicks EVERYTHING twice. No matter if online or offline. That often causes problems. For example if you double-click an icon in the windows taskbar to open an application it opens twice.
Re: Double-clicking on the Web
#59HTTP already handles this just fine if you have sensitive forms: your form can include a one-time token which your server validates. If the token has already been used, you don't process the second request. What we definitely shouldn't do (as the author suggests) is disable form submissions on subsequent clicks. What if the first response fails? You'll have to enter the entire form all over again, instead of being ab…