Avoid displaying of previous pages after logout ASP.NET C# 2.0

Question

I am having problem with logout. After Logging out of the application also, when a user presses browser back button those secured pages are displaying.

And also the page load event is not firing for browser back button. I am using master page and content page.

My logout functionality is in master page.

    Session.Clear();
    Session.Abandon();
    Session.RemoveAll();
    Response.Redirect("~/Default.aspx");

Here my login page is Default.aspx.

clearing browser cache will achieve this but is shows document no longer available " browser message " . I want like if user presses back button he should stay in login page only after logout. I am not using ASP.NET membership provider — Chethan, Mar 26 '13 at 06:58
you may check the session for credentials on page load event of each page if exist then continue or else redirect to login page — Syed Mohd Mohsin Akhtar, Apr 01 '13 at 05:01

score 0 · Accepted Answer · answered Mar 26 '13 at 06:49

What you need to do is, just don't cache the page that you want to prevent user from access after you logs out:

Response.Cache.SetExpires(DateTime.UtcNow.AddMinutes(-1));
Response.Cache.SetCacheability(HttpCacheability.NoCache);
Response.Cache.SetNoStore();

score 0 · Answer 2 · answered Mar 26 '13 at 06:53

0

I think you should not redirect to Default.aspx, in my way, I usually create a "middle page", this page will check sessions and and prevent go back previous page after logout.

The route could be like this: logout -> clear session page -> login page

So, from login page, if you click back button on browser, it would let you to clear session page and go back login area.

answered Mar 26 '13 at 06:53

Phong Vo

1,078
7
16

Seems like good idea. Can u paste code u used for this – Chethan Mar 26 '13 at 07:21
I just upload a sample, you can get it and try it [Sample](https://docs.google.com/file/d/0B3JuSwxrF5UlMnJmYWJKRllRZTQ/edit?usp=sharing) – Phong Vo Mar 26 '13 at 08:00
am not able to get sample – Chethan Mar 26 '13 at 08:24
can you try this [file](http://www.mediafire.com/?zakvx7njnade2v7) – Phong Vo Mar 26 '13 at 08:43

Avoid displaying of previous pages after logout ASP.NET C# 2.0

2 Answers2