Question

I have a protected page and its codes like;

<?php
if (session_id() == "")
 {
 session_start();
 }
if (!isset($_SESSION['username']))
 {
 header('Location: ./index.php');
  exit;
 }
else
 {
    //something after user entered
 }
?>

My android webview can see this page before user enter the system. Why is it like that ? How can I fix it ? Thank you.

Answer 1

You should probably use the

webView.clearCache(true);

to clear the cache.
There are also other useful things like
clearHistory();
clearFormData();
etc.

And things like:

WebSettings webSettings = webView.getSettings();
webSettings.setCacheMode(WebSettings.LOAD_NO_CACHE);

More info:
http://developer.android.com/reference/android/webkit/WebView.html

Oh and as others have mentioned, PHP is serverside so if you trying to use them locally from the App it wont go well.