[Catalyst] Double-posted forms

[Michael Alan Dorman]

Bill Moseley <moseley at hank.org> writes:
> To help with double-posting I sometimes create a unique ID and place
> it in a hidden field and in the session.  Then on submission I make
> sure they match and the remove it from the session.

FWIW, someone's written a plugin to implement this:

http://search.cpan.org/~hide/Catalyst-Plugin-RequestToken-0.03/

I haven't used it yet, but it makes it very easy.  I may, at some
point, try to generalize it to allow it to use memcache instead of the
session, so it will work better across clusters of machines.

Mike