Authentication Signout and back button asp .net

Question

Hi,

I have aproblem in my asp .net pages

We are using form authentication.Once page is signed out i ama able go back to the previous page.

This is due to pages cached in browser.So i disabled the cache.But this has its own drawbacks.

a) If user is logged in he will not be able to navigate to the previous page using back button since no cache available in the browser. b) if i have file download in the page it wont work since cache disabled.

Even history.back javascript function also not the correct solution.

What is the permanent solution for this problem.This i have faced all the time and never found a consistent solution.

Can anyone suggest a possible solution for this.

Thanks SNA

Answer 1

You shouldn't need to disable caching. If you invalidate their session or authticket, you should be able to detect if they are signed out or not, in which case you can redirect them. This link may be helpful. If you are really concerned with the back button try using clearing the clients history via javascript after you log them out.

EDIT Check out This Link It goes in depth on some of the different approaches. I don't think there is a sure fire way of keeping users from looking at previously downloaded content, but there are a few things you can do to make it difficult.