I found three different approaches on various websites that requires a user to log in:
- Log out a user who goes back to the log in page
- Redirect the user to a welcome page
- Do nothing, allow the user to stay on the log in page
I wanted to change the approach from 1 to 2 to improve user experience on my website. But I would like to seek some advice first regarding whether there could be some nasty security exploits awaiting me.
Redirect the user to a welcome page is a good one..
1 and 3 are not unacceptable for any application