Re: HTTP Authentication not getting unset

El Mié 14 Feb 2001 13:44, Chris Lee escribió: > Ive found the same thing and currently do not have a workaround, it seems > that browsers cache this. one method Ive thought of and never tested is to > set a session variable, cross reference that SessionID, PHP_AUTH_PW, > PHP_AUTH_USER are all valid, if not then your not loged in correctly. to > log out just unset SessionID. any future pages will not load. even if the > PW/USER are valid the Session wouldnt. Don't unset the session ID, just destroy the session with session_destroy(). > If the browser has cookies disabled, you have compiled php with > --trans-sid, and the user uses the back button the user would still be able > to view cached pages. you might want to put some fancy no-cache headers in > there somewhere and hope the browser supports them. This feature is pretty cool. If it can't but a cookie in the browser, it expands the URL with the SID, which is all you need, because the variables you register are on the server side (file, database). Saludos... :-) -- System Administration: It's a dirty job, but someone told I had to do it. ----------------------------------------------------------------- Martín Marqués email: martin@math.unl.edu.ar Santa Fe - Argentina http://math.unl.edu.ar/~martin/ Administrador de sistemas en math.unl.edu.ar -----------------------------------------------------------------