Ask HN: Is it still too hard to allow “back” buttons on a banking website?
Bank I used was: ICICI bank.
Bank I used was: ICICI bank.
Adding that it actually takes a fair amount of work to make browser back/forward buttons work in a web application, it is really no wonder that the situation is what it is.
Have a unique hidden input for every form. If a user goes back, regenerate the form.
If a form is somehow resubmitted, print a nice message saying saying that transaction was already submitted.
http://www.gcflearnfree.org/internetsafety/6/print
Topic 6 talks about it. So simple.
It's not really an issue at either of my banks, because a transaction is a lot more than merely submitting a form, and requires authorization with a single-use code. But webshops tend to have far more linear transactions, and I don't always fully trust them to use the back button the way I think it should work.