Forms Auth SignOut Question

[Patrick Olurotimi Ige]

I have a Forms Auth and use a button that allows users to SignOut below
but when they sign out and PRESS THE BACK BUTTON they can see the
previous page WHY?

Sub SignOut(objSender As Object, objArgs As EventArgs)
'delete the users auth cookie and sign out
System.Web.Security.FormsAuthentication.SignOut()
Session.Abandon()
Session.Remove("Context.User.Identity.Name")
'redirect the user to their referring page

Response.Redirect("logon.aspx?ReturnUrl=%2fFormsAuthAd%2fdefault.aspx")

End Sub

ANY IDEAS WHAT I'M DOING WRONG!
Thx

 

[John Saunders]

I have a Forms Auth and use a button that allows users to SignOut below
but when they sign out and PRESS THE BACK BUTTON they can see the
previous page WHY?

Sub SignOut(objSender As Object, objArgs As EventArgs)
'delete the users auth cookie and sign out
System.Web.Security.FormsAuthentication.SignOut()
Session.Abandon()
Session.Remove("Context.User.Identity.Name")
'redirect the user to their referring page

Response.Redirect("logon.aspx?ReturnUrl=%2fFormsAuthAd%2fdefault.aspx")

End Sub

ANY IDEAS WHAT I'M DOING WRONG!

You're not understanding web applications, that's what!

The back button isn't part of your application. It's part of the users
browser. They can press it whenever they want to. It doesn't send a request
for the previous page to your server! Instead, it just displays what your
server responded with the last time that page was requested.

What happens when the user hits the Back button and then the Refresh button?
Refresh will make a new request to your server.


John Saunders

 

[Chris Hyde]

I have a Forms Auth and use a button that allows users to SignOut below
but when they sign out and PRESS THE BACK BUTTON they can see the
previous page WHY?

Sub SignOut(objSender As Object, objArgs As EventArgs)
'delete the users auth cookie and sign out
System.Web.Security.FormsAuthentication.SignOut()
Session.Abandon()
Session.Remove("Context.User.Identity.Name")
'redirect the user to their referring page

Response.Redirect("logon.aspx?ReturnUrl=%2fFormsAuthAd%2fdefault.aspx")

End Sub

ANY IDEAS WHAT I'M DOING WRONG!
Thx

One possiblity is they are loading the page from their browser's cache.
You would have to try and not cache your pages (using pragma-nocache
and other methods, just search Google and you will find a wealth of
information).

HTH...

Chris

 

[Patrick Olurotimi Ige]

John..
Thanks for the reply..
I do know its not part of my Application but
What 'm asking here is that if there is a WAY!

 

[Patrick Olurotimi Ige]

Thanks Chris for the Idea!

 

[John Saunders]

John..
Thanks for the reply..
I do know its not part of my Application but
What 'm asking here is that if there is a WAY!

Patrick,

The user could have taken a screen shot of your previous page. He could then
look at the screen shot whenever he wants to. There's nothing you can do
about that.

The user pressing the Back button is the same thing as the user keeping a
screen shot of the page. It's just an image of something that happened
previously. Even if you play games with the page expiration, there's nothing
you can do to prevent the user from keeping a screen shot of the page, or a
memory of it.

John Saunders

 

[Patrick Olurotimi Ige]

Thanks John for the detailed explanation!
Patrick