How to prevent php from returning the page after logging out?
I was protecting a page for level 3 users. Level 1 -> admin = datapegawai.phplevel 2 -> owner Level 3 -> employee. When I return it after logging out, this page (datapegawai.php) will always return.<?php
session_start();
unset($_SESSION['user']);
session_destroy();echo"<meta http-equiv='refresh'content='0; url=login.php'>";?>
+3
source to share
2 answers
@Ayuktia: You are killing the session. So when you push back. The browser shows the cached page. Do the following things.
1) Pages behind login, check if the session exists. Unless you redirect it to the login page.
2) Use headers that tell the browser not to cache pages that require authentication.
header("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1
header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); // Date in the past
3) Use permanent header redirection.
header("Location: login.php",TRUE,302);
die();
+1
source to share