Hi all,
I'm using Forms Authentication and the LoginView/ LoginStatus control to log out.
<asp:LoginStatus ID="HeadLoginStatus" runat="server"
LogoutAction="RedirectToLoginPage" LogoutText="Log Out"
LogoutPageUrl="~/default.aspx"
onloggedout="user_loggedOut" />
The problem is that if I log out and then click the back button I can gain access to pages that a guest user shouldn't be able to access.
I have web.config files in the folders that should restrict access to guest users however when I click back, the username of the user who logged out is still visible.
I tried deleting the cache, cookie and session but the guest can still gain access.
Sub user_loggedOut(ByVal sender As Object, ByVal e As System.EventArgs)
'--TRYING TO CLEAR THE CACHE
Dim enumerator As ...
Go to the complete details ...