+- Atozed Forums (https://www.atozed.com/forums)
+-- Forum: Atozed Software Products (https://www.atozed.com/forums/forum-1.html)
+--- Forum: IntraWeb (https://www.atozed.com/forums/forum-3.html)
+---- Forum: English (https://www.atozed.com/forums/forum-16.html)
+----- Forum: IntraWeb General Discussion (https://www.atozed.com/forums/forum-4.html)
+----- Thread: How to make logout from app? (/thread-1367.html)
How to make logout from app? - cprmlao@hotmail.com - 11-07-2019
Hi,
What is the correct way to log out of from app?
I'm using logout button with TerminateAndRedirect ('login_page.html").
The login page of my app is loaded again, but if I press backspace a few times, it shows forms of the previously logged user.
Regards,
Luiz
RE: How to make logout from app? - Alexandre Machado - 11-08-2019
Are you using HTTPS?
If using simple HTTP your pages are vulnerable even if expired and there is no way on earth that you can make a browser not to show its history.
There is an answer here on SO that explains it well:
https://stackoverflow.com/questions/49547/how-do-we-control-web-page-caching-across-all-browsers
From where we can extract this link which contains the actual reason for this behavior:
https://httpwg.org/specs/rfc7234.html#history.lists
RE: How to make logout from app? - cprmlao@hotmail.com - 11-08-2019
(11-08-2019, 11:27 AM)Alexandre Machado Wrote: Are you using HTTPS?Thank you Alexandre
If using simple HTTP your pages are vulnerable even if expired and there is no way on earth that you can make a browser not to show its history.
There is an answer here on SO that explains it well:
https://stackoverflow.com/questions/49547/how-do-we-control-web-page-caching-across-all-browsers
From where we can extract this link which contains the actual reason for this behavior:
https://httpwg.org/specs/rfc7234.html#history.lists