Question

I am trying to implement Login/Logout functionality in my website without using inbuilt functionality of Login controls in ASP.NET. In some pages, which require the user to be logged in, I have written this in Page_Load

if (Session["cod"] == null && Session["admin"] == null)
        {
            Response.Redirect("You need to Login.aspx");
        }
        if (Session["cod"] != null || Session["admin"] != null)
        {
            LinkButton1.Text = "Logout";
        }

        if (Page.IsPostBack == false)
        {
            log_bind();
            grid1_bind();
            grid2_bind();
        }

But while I was testing this, I noticed that when I press the Back/Forward button on the browser, these pages are viewable without being logged in. How do I prevent this?

Answer 1

This has nothing to do with the login controls, but as others state, the caching of the page.

The trick is to tell the browser that it can’t cache the page.
Look at this post, and its solution:
Disable browser cache for entire ASP.NET website