# How to protect a form to be submitted several times

**URL:** <https://www.ruby-forum.com/t/how-to-protect-a-form-to-be-submitted-several-times/124379>\
**Category:** Rails\
**Created:** [December 28, 2007, 6:15am UTC](https://www.ruby-forum.com/t/how-to-protect-a-form-to-be-submitted-several-times/124379 "2007-12-28T06:15:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 28, 2007, 6:15am UTC](https://www.ruby-forum.com/t/how-to-protect-a-form-to-be-submitted-several-times/124379/1 "2007-12-28T06:15:12Z")

</div>

I’am looking for a solution to prevent a user to submit a form  
several times.

How do you solve this problem?

Captchas? Only one submit per session…??

–  
Jochen K.  
[figgfrosch.de](http://figgfrosch.de) / [gissmoh.de](http://gissmoh.de) / [ror-ror.de](http://ror-ror.de) / [railswerk.de](http://railswerk.de)

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 28, 2007, 6:23am UTC](https://www.ruby-forum.com/t/how-to-protect-a-form-to-be-submitted-several-times/124379/2 "2007-12-28T06:23:05Z")

</div>

Try to disable the submit button using javascript.

Using “onsubmit” in form tag.

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 28, 2007, 6:33am UTC](https://www.ruby-forum.com/t/how-to-protect-a-form-to-be-submitted-several-times/124379/3 "2007-12-28T06:33:54Z")

</div>

That’ll only work until they refresh the page.

Jochen, store a session variable and/or a cookie. Check to see if that  
cookie/session exists, then deny them access if it does.

On Dec 28, 2007 3:53 PM, Karthi kn [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
wrote:

> Try to disable the submit button using javascript.
> 
> ## Using “onsubmit” in form tag.
> 
> Posted via [http://www.ruby-forum.com/](http://www.ruby-forum.com/).
> 
> >

–  
Ryan B.

> **[frozenplague.net](http://www.frozenplague.net)**
>
> This domain may be for sale!

Feel free to add me to MSN and/or GTalk as this email.