Re: Stopping secure pages appearing in history

From: Bullschmidt (paul_at_bullschmidt.com-nospam)
Date: 01/26/05 

Date: Tue, 25 Jan 2005 20:48:02 -0800

<<
I know this probably sounds like a newbie question, but I was under the
impression that secure pages (https) don't appear in the history/address
bar
history list - this appears to be incorrect?

Should I really be putting some form of expiry command at the head of
each
of these pages if I don't want casual users to see them?

I use Classic ASP so is it better to use a command via this lang or the
old
META methods?

Depending on which is the best, what are these commands?
>>

Well for any secure pages I generally would sure that a session variable
were OK before even being able to look at the page. And thus if the
session were expired such as 20 minutes or whatever after a valid user
were on that page then anyonen on that PC trying to go to that page
again would get kicked out to the login page.

Classic ASP Design Tips - Login Page
http://www.bullschmidt.com/devtip-loginpage.asp

Best regards,
J. Paul Schmidt, Freelance ASP Web Developer
http://www.Bullschmidt.com
ASP Design Tips, ASP Web Database Demo, Free ASP Bar Chart Tool...

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Relevant Pages

  • Re: Securing Non ASP.Net Files
    ... all ASP pages that was secured (meaning password protected allowing only ... I did further research and found that you can set-up IIS to force ... This has worked fine for .aspx, ... You indicate that you'd like to secure ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: SSL & ASP Code ??
    ... kind based on whether the request is secure or not. ... I think you are really just asking about how to use the ASP Include ... functions inside that script content is a straightforward function call. ... Eric Carr Tribute ...
    (microsoft.public.inetserver.iis.security)
  • Re: CGI security vs ASP security
    ... Or is it just easier to implement ASP ... how you secure your source. ... Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the ... Training features 6 hand-on courses on May 12-13 taught by professionals. ...
    (Security-Basics)
  • Re: ASP security in HTML pages
    ... > I have been googling around to know how secure can be ASP code, ... > - For a newbee, impossible to get the asp scripts inserted in an HTML page as they are not displayed in the client's browser, ... securely and server permissions are properly setup. ... The server never sends the ASP code to the client if it is properly configured. ...
    (Security-Basics)
  • Re: ASP or ASP.NET
    ... Do not learn ASP as other Ps have said. ... "secure" to begin with, that is why Asp.Net was born. ... Windows XP Pro, which is a smart thing to do. ... Replace it as soon as you get the hold of XP Pro. ...
    (microsoft.public.dotnet.framework.aspnet)