I use the following code to kill session variables.

<cfoutput>
#StructClear(session)#
</cfoutput>

If, by chance, a user tries to backup, all they are going to see is the same
thing that they saw before the hit the logout button.  If they try to do
anything else, my security logic kicks them back to the login page.

---mark



-------------------------
Mark Warrick
(714) 939-6431
The Sistonia Corporation
[EMAIL PROTECTED]
http://www.sistonia.com

> -----Original Message-----
> From: Steve Reich [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, May 25, 2000 11:48 AM
> To: CF Talk
> Subject: Killing Session & Back Button
>
>
> I have a link on my site for users to log out. This takes them to a page
> that kills all session variables and then directs them back to the login
> page. However, if they hit the back button, they can get back to
> where they
> were when they logged out, refresh the page, and their variables
> are reset.
> How can I kill the variables so the page isn't available with the back
> button without them?
>
> TIA
>
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Steve Reich
> Backsoft Corporation
> 6960 Professional Parkway East
> Suite 100
> Sarasota, Florida 34240
> Toll Free: (888) 222-6047
> Phone: (941) 907-6655 - Ext.1038
> Fax: (941) 907-6643
>
> email: [EMAIL PROTECTED]
> web: http://www.backsoft.com
>
> "Any sufficiently advanced technology
>  is indistinguishable from magic."
>
>                               - Arthur C. Clarke
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> ------------------------------------------------------------------
> ------------
> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
> http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf
> _talk or send a message to [EMAIL PROTECTED] with
> 'unsubscribe' in the body.
>

------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to