in reply to Help how to disable the Back Button in the browser

Don't try and disable the back button. It is very user-antagonistic to mess with the normal browser operation.

If you are asking people to log in then presumably each page requiring login enforces it, so security is not an issue.

If someone logs out, hits the back button, then tries to do something requiring login, then just redirect to the login page (w/ a message saying something like "You must login to ..."). This shouldn't be confusing since they actively logged themself out.

  • Comment on Re: Help how to disable the Back Button in the browser

Replies are listed 'Best First'.
Re: Re: Help how to disable the Back Button in the browser
by Anonymous Monk on Jun 25, 2001 at 07:12 UTC
    sorry How u can detect they are pressing the back button. for me i have use the verify sessionid develop by my self to check the valid id, so it will redirect them to the login page again, but only happen is the page has refreshes from the cgi script.
      You don't have to! If you've set it all up correctly, you will have somehow marked the user (using a cookie, or some server storage keyed by session ID) as logged out. Then, when the user attempts to do something involving login, your program will see that they are logged out, and tell them to log in again.