Session kill and apache

From: Date: Wed, 25 Apr 2001 23:53:34 +0000
Subject: Session kill and apache
Groups: php.general 
Request: Send a blank email to php-general+get-50356@lists.php.net to get a copy of this message
Greetings! Here's my problem: I have a web-based application from which it is possible to log off. The user is authenticated through a .htpasswd file and then he access the system. After that a button is displayed that can log off the user. If he clicks on this, the application does the following: session_unregister() all the session variables and then session_destroy(). Now my problem is, if the user clicks back enough of time or if he manually enter the initial .php page in the url bar, he will reach the initial page where the user is usually authenticated throught he .htpasswd file. At this point the user is accepted automatically and he does not need to re-enter his user/password. I don't want this to be possible, i want the user to enter the user/password again. Is their an apache command to kill the session or some other approach to this problem??? Dominique Paquin

« previous php.general (#50356) next »