El Mié 14 Feb 2001 13:44, Chris Lee escribió:
> Ive found the same thing and currently do not have a workaround, it seems
> that browsers cache this. one method Ive thought of and never tested is to
> set a session variable, cross reference that SessionID, PHP_AUTH_PW,
> PHP_AUTH_USER are all valid, if not then your not loged in correctly. to
> log out just unset SessionID. any future pages will not load. even if the
> PW/USER are valid the Session wouldnt.

Don't unset the session ID, just destroy the session with session_destroy().

> If the browser has cookies disabled, you have compiled php with
> --trans-sid, and the user uses the back button the user would still be able
> to view cached pages. you might want to put some fancy no-cache headers in
> there somewhere and hope the browser supports them.

This feature is pretty cool. If it can't but a cookie in the browser, it 
expands the URL with the SID, which is all you need, because the variables 
you register are on the server side (file, database).

Saludos... :-)

-- 
System Administration: It's a dirty job, 
but someone told I had to do it.
-----------------------------------------------------------------
Martín Marqués                  email:  [EMAIL PROTECTED]
Santa Fe - Argentina            http://math.unl.edu.ar/~martin/
Administrador de sistemas en math.unl.edu.ar
-----------------------------------------------------------------

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to