This topic is locked
[SOLVED]

 True Logout

6/27/2013 3:59:54 PM
PHPRunner General questions
ladykathleen author

I am running a system and we have computers set up where customers can register and login and use our program.
The trouble I am having is when they logout it just loads the login page.
but if someone was to go behind them and hit the back button on the browser, then it will show them as logged in as the previous user.
for security reasons we would like to have a true logout.
Anyone know how we can do this?

C
cgphp 6/27/2013

After logout action, if you hit the back button, it will NOT show any information about the previous user.

What do you mean when you say "it will show them as logged in as the previous user" ?

ladykathleen author 6/27/2013



After logout action, if you hit the back button, it will NOT show any information about the previous user.

What do you mean when you say "it will show them as logged in as the previous user" ?


If I click on the logout button. It takes me to the login page.
then if I was to click on the back arrow near my browser's address bar.
It shows the last page I was on while logged in and could then continue anywhere being logged in like I never logged out.

-------------------

So if I was using a computer everyone uses.. and I click logout button and walk away
anyone could then come in hit the browser's back arrow and be logged in as me.
This is not a random thing this is all the time this way.

C
cgphp 6/27/2013

Which version of PHPrunner are you using?

ladykathleen author 6/27/2013



If I click on the logout button. It takes me to the login page.
then if I was to click on the back arrow near my browser's address bar.
It shows the last page I was on while logged in and could then continue anywhere being logged in like I never logged out.

-------------------

So if I was using a computer everyone uses.. and I click logout button and walk away
anyone could then come in hit the browser's back arrow and be logged in as me.
This is not a random thing this is all the time this way.


OK I went back and did more checking and it does work if you try to go to a page that a guest does not have permissions too. I was on a guest page when I was checking.
But thanks for the reply because it made me recheck farther.