Preventing Users from using the back button to view restricted pages after logout.

[roshni86]

I have the following code for a logout of an account in php.However it is not working,as when i press the "back" button,the page returns to the previous page where a user had signed and viewed.

[code=php]<?php
//start the session
session_start() ;

//check to make sure the session variable is registered
if(session_is_r egistered('user id')){

//session variable is registered, the user is ready to logout
session_unset() ;
session_destroy ();
}
else{

//the session variable isn't registered, the user shouldn't even be on this page
header( "Location: login1.php" );
}
?>[/code]

[Please use CODE tags when posting source code. Thanks! --pbmods]

Pleeeeaase help :(

[mwasif]

Use only this code in your logout page

[PHP]//start the session
session_start() ;

//session variable is registered, the user is ready to logout
session_unset() ;
session_destroy ();

// define here the next page address
header( "Location: login1.php" );
exit;[/PHP]

Are you verifying the user session correctly on the previous page?

Please do not ask questions in CAPS.

[pbmods]

Heya, roshni86. Welcome to TSDN!

To effectively prevent this, you need to block the browser from caching the page. Check out this article.

[pbmods]

Changed thread title to better describe the problem.