Session and URL problem

[Stephen]

HI,

I have created an application that has a logout.aspx page. here I clear the
session variables and redirect the user to the login page, but if I dont
close the brower and hit the "back" button. the user is directed to the old
pages.
How do i avoid this?

Please advice,
Stephen

[Joerg Jooss]

Stephen wrote:

HI,

I have created an application that has a logout.aspx page. here I
clear the session variables and redirect the user to the login page,
but if I dont close the brower and hit the "back" button. the user is
directed to the old pages.

Make your pages non-cacheable by issueing the page directive

<% @OutputCache Location="none" %>

or setting the appropriate HTTP headers manually.

(Note that this only works if a browser applies the cache control headers to
its internal history, like IE.)

Also make sure to properly set up directory access security in your
web.config.

Cheers,

--
Joerg Jooss
jo*********@gmx.net