Re: sessions and browser back[Scanned]

Thanks Michael, Can you suggest any other method (without using session_start) by which I can track users and validate for each page. What I do currently , in the login page register the user using sessions and in other pages see if user is registered. I need to restrict each page based on mysql table page access right against each user. Thanks, Bibhas Michael Egan wrote: > > Bibhas, > > I'm sure I've read somewhere that this is a deliberate security feature with using > sessions - i.e. you can't view contents of form fields by using the back button on your > browser. > > Couldn't you use JavaScript to ensure that the data is validated on the client side before > the form is submitted? > > Regards, > > Michael Egan > > -----Original Message----- > From: Bibhas Kumar Samanta [mailto:bks@cal.interrasystems.com] > Sent: 25 June 2003 14:26 > To: php-general@lists.php.net > Subject: [PHP] sessions and browser back[Scanned] > > Hi, > > I am trying to create restricted pages for my php/mysql/apache > server with sessions and passing session varibales to other pages for > validation. > > Eventually I am doinng session_start() at the begining and > checking whether logged in user is authorised to use this page > by a routine. > > Now problem is, if filled in data in the form is incorrect, the forms > gives an error. But when I press browser BACK button to get the > filled in form , the form seems to get reset with _no_ data. > > When I try without session_start() at the begining of form , things > seem to behave normally. > > Does session_start() reset the form and I guess browser should > have returned be by fiiled in page from cache ? > > Please help > > -Bibhas > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php