after logout still can view?

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
chen
Forum Newbie
Posts: 3
Joined: Fri Jun 24, 2005 4:22 am

after logout still can view?

Post by chen »

Hello,

Now my problem is,
why after i logout the web page,then i click the back button from the IE still can view my web page. 8O

but when i close the web page and open again it have remind me to login.
and i also clear my session.

Thanks.
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

You'll need to post your code... we can't read your mind and extract the lines of code you wrote to acheive this magical creation ;)
method_man
Forum Contributor
Posts: 257
Joined: Sat Mar 19, 2005 1:38 am

Post by method_man »

maby your session wasnt cleared correctly???
chen
Forum Newbie
Posts: 3
Joined: Fri Jun 24, 2005 4:22 am

Post by chen »

this is ASP code
<%
Response.CacheControl = "no-cache"
Response.AddHeader "Pragma", "no-cache"
Response.Expires = -1
%>

something like this. but i want PHP one
something like clear the pager cache after i logout
and my session all thing is ok
it only is a bug for my program
if the person after logout not close the IE then others people can click BACK BUTTON to view back. if he close it others people cannot do like that if they know the address.

hope somebody know my question :D
programmermatt
Forum Commoner
Posts: 65
Joined: Tue Mar 15, 2005 5:03 pm
Contact:

Post by programmermatt »

chen
Forum Newbie
Posts: 3
Joined: Fri Jun 24, 2005 4:22 am

Post by chen »

ok, i will back home try it
hope it can be use.
thanks :D
Post Reply