Hi all,
I am using HTTP basic authentication (using HTTPS) to authenticate the users who access my HTML pages. I am using Perl scripts to manipulate the POST data that I get from the user input. I would like to have a logout button, but I read somewhere that it's not possible to have a logout button with HTTP basic authentication. Is this true? If so, do you know what other options I have that would support a logout button? I heard about cookie-based authentication, but I'm not sure how that works and what I would need to implement this logout button. I know that Perl has some world wide web modules, but being a novice to Perl, I'm not sure how to apply those modules. Is there some sample code that I can look at?
Also, the user can click 'back' without the page expiring. Is this a security issue? If so, why? Finally, how can I make the page expire? Can I do this with Perl? I heard about this "session" variable that I can keep track of in my HTML pages, but I'm not sure how that works.
Any pointers would be greatly appreciated. Thanks!
Monica