[sky4est]

For no good reason this code sometimes inserts the data twice into my mysql database. It seems to happen only from IE and XP and it seems to only happen randomly. Is it a POST or GET thing from the referring page? Any help would be great.
Thanks,
-Sky.

Here is my code:

PHP Code:

<?php

$connection=mysql_pconnect("localhost","user","password");
if (!$connection) {
 echo "Could not connect to MySQL server!";
 exit;
}


$db=mysql_select_db("database",$connection);
if (!$db) {
 echo "Could not change into the database mondavi";
 exit;
}



$order_id = $_REQUEST["order_id"];
$event_id = $_REQUEST["event_id"];
$series_id = $_REQUEST["series_id"];
$item_name = $_REQUEST["item_name"];
$event_date = $_REQUEST["event_date"];
$event_time = $_REQUEST["event_time"];
$price_category = $_REQUEST["price_category"];
$adult_tickets = $_REQUEST["adult_tickets"];
$student_tickets = $_REQUEST["student_tickets"];
$child_tickets = $_REQUEST["child_tickets"];
$parking_permits = $_REQUEST["parking_permits"];
$line_subtotal = $_REQUEST["line_subtotal"];
$multiple_time_event_name_1 = $_REQUEST["multiple_time_event_name_1"];
$multiple_time_event_date_time_1 = $_REQUEST["multiple_time_event_date_time_1"];
$multiple_time_event_name_2 = $_REQUEST["multiple_time_event_name_2"];
$multiple_time_event_date_time_2 = $_REQUEST["multiple_time_event_date_time_2"];
$multiple_time_event_name_3 = $_REQUEST["multiple_time_event_name_3"];
$multiple_time_event_date_time_3 = $_REQUEST["multiple_time_event_date_time_3"];
$multiple_time_event_name_4 = $_REQUEST["multiple_time_event_name_4"];
$multiple_time_event_date_time_4 = $_REQUEST["multiple_time_event_date_time_4"];
$multiple_time_event_name_5 = $_REQUEST["multiple_time_event_name_5"];
$multiple_time_event_date_time_5 = $_REQUEST["multiple_time_event_date_time_5"];

?>


<?
$sql = "INSERT INTO orders (order_id, event_id, series_id, item_name, event_date, event_time, price_category, adult_tickets, student_tickets, child_tickets, parking_permits, line_subtotal, multiple_time_event_name_1, multiple_time_event_date_time_1, multiple_time_event_name_2, multiple_time_event_date_time_2, multiple_time_event_name_3, multiple_time_event_date_time_3, multiple_time_event_name_4, multiple_time_event_date_time_4, multiple_time_event_name_5, multiple_time_event_date_time_5) VALUES ('$order_id', '$event_id', '$series_id', '$item_name', '$event_date', '$event_time', '$price_category', '$adult_tickets', '$student_tickets', '$child_tickets', '$parking_permits', '$line_subtotal', '$multiple_time_event_name_1', '$multiple_time_event_date_time_1', '$multiple_time_event_name_2', '$multiple_time_event_date_time_2', '$multiple_time_event_name_3', '$multiple_time_event_date_time_3', '$multiple_time_event_name_4', '$multiple_time_event_date_time_4', '$multiple_time_event_name_5', '$multiple_time_event_date_time_5')";

mysql_query($sql,$connection);
mysql_close($connection);


?>

[NeverMind]

I think it's only a problem when a visitor double click the submit button, that's all !!
maybe you could have an anti-flood script to avoid this, another thing is to have a unique field in MySQL so the same order_id can't be inserted twice ..

[sky4est]

I have an auto increment 'id' field in my MySQL table, which is unique for each item ordered. At the moment it just moves on to the next value when it gets the double entry. How can I use it to allow only one insert to the database?

About the double submit, it's kinda hard to get away from because I use select lists to update the page and they submit the form when they update.....would moving the insert code into the same page and putting in a function help?

[blaw]

Hi there,

The purpose of auto_increment (at least the major part of it) is to allow inserting more than one records without worrying about duplicate (primary key) entries. So you don't want to try to limit that. If there is anything else that is unique across the data (e.g. SIN) then you can set this as primary key.

I am not sure what your form looks like but one thing I do sometimes is to refresh the page right after I do all the input check/processing (e.g. inserting into database). "Refreshing" I mean here is to use header('Location: '.$_SERVER['PHP_SELF'].'?action=thanks'); or something (could be REQUEST_URI instead of PHP_SELF, depending on what you are doing).

I can then place a confirmation handling message if ($_GET['action'] == 'thanks'). But this doesn't help sometimes, like when the user enters very sensitive info and you don't want to carry around in GET or SESSION.

My 33 cents.