Posted by ZeldorBlat on 10/10/37 11:39

Bongo wrote:
> Hi there,
>
> I am very new to the world of php and anything dynamic...
>
> I have created a session and a logout button...
>
> when I logout and then press the back button far enough to where I
> logged in... it logs in again. Even when I destroyed the session...
>
> Anyone have any ideas what I am doing wrong?
>
>
> Bongo

Nothing. I'm guessing you have some login form which checks the
username and password somehow. When you push the back button enough
times, you eventually get to that page. The browser re-posts the
login/password (it might give you a warning about this) to the form and
you are logged in again, session created.

Re-submission of form data when using the back or refresh button is a
common problem in web-based applications. There are a lot of ways to
deal with it, and you'll find plenty of newsgroup threads on the topic.

[Back to original message]