I have a webpage that requires login. Once a user has logged in I start the session and once he logs out I destroy it, but when I press the back page it gives me the user profile page again which ideally should not be the case as the user has logged out. However, it works fine if I reload the page after logging out.
It's a local chatroom where everybody online and logged in can chat together. There are three pages: login.php
, auth.php
, logout.php
login.php
is the common login page containg a form. auth.php
has a div
displaying all previous chats up til now, a textbox and share button on clicking which a form is sent again to auth.php so everytime the form is posted the chatpost is sent to database and auth is reloaded with the latest database within the chat div..
Now the problem is once I logout I unset all the variables and destroy the session but even then if I hit the back button in browser (Safari), the previous version of auth.php
without the last chat entry is visible which ideally should not as the session is destroyed. I have put a session validation in auth.php
, so basically I want the auth.php
to reload of the user visits it after logging out as reloading auth.php
displays that "you are not logged in"
i have tried
<?php header("Cache-Control: no-cache");
header("Pragma: no-cache");
?>
and
<head>
<meta http-equiv='Pragma' content='no-cache'>
<meta http-equiv='Expires' content='-1'>
</head>
Sorry for the lengthy question but I really need help on this.
How do I stop page reload/refresh on hit back button? You have to detect browser back button event and pass as an input of the page you want do prevent URL reload that indicates you if you came from a back button click. this code: $(window). on('popstate', function(event) { alert(“pop”); });
Chrome and Windows:Hold down Ctrl and click the Reload button. Or Hold down Ctrl and press F5.
The reload() method reloads the current document. The reload() method does the same as the reload button in your browser.
header("Expires: Thu, 19 Nov 1981 08:52:00 GMT"); //Date in the past
header("Cache-Control: no-store, no-cache, must-revalidate"); //HTTP/1.1
This works for me on FF3.6, IE7, IE8, Chrome5 (when hitting browser's back/forth button the page is always RELOADED)
Another solution is to send exactly the same headers sent by session_start()
function, very similar to the ones above, but even more rich:
header("Expires: Thu, 19 Nov 1981 08:52:00 GMT"); //Date in the past
header("Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0"); //HTTP/1.1
header("Pragma: no-cache");
NOTE: also the order shown here is the SAME as the order sent by session_start()
(you can test this with HttpFox addon for FF)
These headers will force the browser, and proxies if any, not to cache the page and force a new request to the server for that page:
header("Cache-Control: private, must-revalidate, max-age=0");
header("Pragma: no-cache");
header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); // A date in the past
For a pure javascript solution just add this to your HTML:
<input id="alwaysFetch" type="hidden" />
<script>
setTimeout(function () {
var el = document.getElementById('alwaysFetch');
el.value = el.value ? location.reload() : true;
}, 0);
</script>
The code simply assigns a value to the hidden input that will remain after the back button is clicked. This is then used to determined if the page is stale in which case it is reloaded.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With