Home/ Questions/Q 8182317
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-07T00:49:32+00:00

For security reasons, several articles recommend do not cache pages. So I usually put

  • 0

For security reasons, several articles recommend “do not cache pages”. So I usually put the following at the beginning of my web pages

header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");

That works very well, but many of the visitors likes to use the history buttons. So, I need to allow it for a short period.
I tried to use the following headers

header("Cache-Control: maxage=".$expires.", must-revalidate");
header('Expires: ' . gmdate('D, d M Y H:i:s', time()+$expires) . ' GMT');

where $expires is the time I need. The problem is that pages do not expire, as if those headers were not there. How can I solve this?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    In short: Browser history caching is something different that you can not entirely control. There is a perfect and exhaustive answer to another question, that also answers your question over here:

    Why both no-cache and no-store should be used in HTTP response?

    • 0