I have tried all that and still have the same problem. 

In the Application.cfm file:
   <cfif IsDefined("url.logout")>
        <cflocation url="logout.cfm" addtoken="No">
   </cfif>
   <cfinclude template="act_login.cfm">

In the logout.cfm file:
   <cflogout>
   <cfheader name="Expires" value="#Now()#">
   <cfheader name="Pragma" value="no-cache">
   <cfheader name="Cache-Control" value="no-cache, no-store, must-revalidate">
   <cfcookie name="CFID" expires="now">
   <cfcookie name="CFTOKEN" expires="now">
   <cfcookie name="JSESSIONID" expires="now">
   <cfset StructClear(Session)>
   <cfif isdefined('cflogin')>
        <cfset StructClear(cflogin)>
   </cfif>
   <cfif structKeyExists(form,"LoginForm")>
        <cfset StructClear(Form)>
   </cfif>
   <cflocation url="index.cfm" addtoken="No">

And in the act_login.cfm page:
   <!--- Idle timeout in seconds. matches session timeout in cfapplication --->
   <cflogin idletimeout=#Ltimeout#>

   <cfif NOT IsDefined("cflogin")>
        <cfinclude template="dsp_loginform.cfm">
        <cfabort>
   <cfelse>
        <cfif structKeyExists(form,"LoginForm")>
                <!--- If variables.authenticated is not empty, user is valid. 
--->
                <cfif form.J_USERNAME neq "test" or form.J_PASSWORD neq "test">
                        <cfinclude template="dsp_loginform.cfm">
                        <cfabort>
                <cfelse>
                        <cfloginuser name="#cflogin.Name#" 
password="#cflogin.password#" roles="">
                </cfif>
        <cfelse>
                <cfinclude template="dsp_loginform.cfm">
                <cfabort>
        </cfif>
   </cfif>
   </cflogin>

I made sure that the non-caching code was in the head section of the display 
pages. The back button will still get me logged back in after I've logged out.



>Once they have logged out, redirect them to the sign-in page using
>CFLOCATION or a javascipt redirect.  That will clear the form
>submission. 
>
>Then, on each page request, you need to instruct the browser not to use
>the cached copies of the pages.
>
>I just posted some non-caching code this morning, but I don't remember
>which newsgroup it was, this or cf-community or the cfc list.
>
>M!ke

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:199240
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to