Weblogin does not logout correctly

Hi Guys,

I have asmall problem with Weblogin (Standard).

Everything seems to work apart from when a web user logs out then they can still use the browser back button to view all of the ’restricted’ content.

Call on home page:

[!WebLogin? &tpl=`FormLogin` &loginhomeid=`47` &logouthomeid=`93`!]

I am using Evo 1.04 on a PHP5.1 server.

Is there something I should be doing to correct this?

Thanks in advance.

UPDATE:

I have tamed this by using various no-cache .htaccess settings, so the page gets essentially ’refreshed’ when someone hits the back button.

However works in Opera, IE and FF but not Safari though...

I cannot beleieve that this is the default nature of MODx web user authentication, can someone reassure me to the contrary - I’ d far prefer it if I were doing something wrong!

Thanks.

This really doesn’t have anything to do with MODx; it’s the browser caching the page, then viewing the cached page instead of actually requesting it again (in which case it would be refused as "unauthorized"). Various no-cache or expires meta tags might help, but again that depends on the browser.

http://www.htmlgoodies.com/beyond/reference/article.php/3472881/So-You-Dont-Want-To-Cache-Huh.htm
http://support.microsoft.com/kb/234067
http://support.microsoft.com/kb/222064

Thanks Susan,

Cross referencing the info you’ve provided with what i’ve done already I think i’ve managed to get it to how the client wants.

Much appreciated.