Re: After gmail logs out, cannot go back through browser back button

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Try to add following headers to your page

Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT

Then when you click back button browser will request the page again and it's up to your code to check if user is not logged in and redirect to login page.

George.

"Author" <gnewsgroup@xxxxxxxxx> wrote in message news:bd85651d-dff3-474f-95d1-785bc818c34c@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
After we log out gmail, if we then click on the back button of our
browser, we cannot go back to our inbox. I've tried both Firefox and
IE, both work nicely like this. How did they achieve this?

In my asp.net web application using forms authentication, one can
still go back through the browser back button after one logs out my
application, although, clicking on anything will still kick the user
out.

How can I also prevent people from going back through the browser back
button after one has logged out, just like gmail?

Thanks a lot.

.



Relevant Pages

  • (not) caching with mod_expires
    ... trying to get our content to cache nicely at the browser. ... URL causes a conditional request and a 304 response. ... Expires: Wed, ...
    (comp.infosystems.www.servers.unix)
  • Re: Custom 401 page problems
    ... Since you configured IIS to send a staic for this ... Now, a 401 response comes back to the client, and the entite body is the ... it is going to make a new request for this resource ... What request do you think the browser makes to fetch the 401.gif ??? ...
    (microsoft.public.inetserver.iis)
  • Re: How to write something to a html textfield and send it?
    ... > No need for controlling any particular browser. ... I'm not familiar with HTTP user ... and building the request in your program. ... The server doesn't know anything about a textfield; ...
    (comp.programming)
  • Basic Authorization Security Issue?
    ... seems like closing the browser ... When an non-authorized URL request in our intranet web server is attempted, ... resent with the basic authorization credentials and the user is logged in. ...
    (microsoft.public.security)
  • Re: openssl from tcl
    ... "gets $fp" to retrieve the request from the web browser. ... I send a response back to the browser, using "puts $fp 'html data'", ... Because you made the client connect to localhost, ...
    (comp.lang.tcl)