note 10505 deleted from ref.session by yohgaki

At 1:03 on 15-Nov-2000, kevin_at_henrikson_dot_com wrote... If in your php.ini file you set session.cache_limiter= Then browsers will return to their normal cahcing state. No expired pages, or problems with the back button. Plus this is much easier than editing the code and recompiling, as reccommended above. My question is... Is it as secure? I too am having dilemas resulting from session enabled pages losing form data when you return to them from the next page using the back button. It seems (from comments on here) that if I allow session enabled pages to be cached then a page being served to somebody by a proxy server could contain the session of another user using the same proxy server. Is this true, and is it still true if you set session.cache_limiter to NULL?