Home/ Questions/Q 6120279
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T15:39:01+00:00

I have a protected page which shows data to logged in users only, once

  • 0

I have a protected page which shows data to logged in users only, once the user clicks logout link, it destroys the session data and redirect to another page. header('Location: login.php');

Now once the page is redirected to login.php, i can easily go to back page which was protected, and can see all information there and can stay on the page untill i refresh the browser or close it.

On the websites like Gmail, and many others, once you are logged in, you can not go to back page. How this can be implemented?
Thanks.

Edit: Sorry if its unclear, the protected page has few lines of code in the top to check if the session is set or not. if the session is not set then it should redirect to the other page. but the problem is that it doesnt check the session if i hit the back button on browser.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    This behavior may be caused by the default caching settings of your browser/web server.

    Whenever a user visits a protected page, try sending headers to prevent caching of the page:

    header('Cache-Control: no-cache, must-revalidate');
header('Expires: Sat, 26 Jul 1997 05:00:00 GMT');

    This should usually cause any back-button presses to cause a complete reload of the page instead of loading it from the browser’s cache.

    • 0