IE Warning - How to override that?

halex

OK, this is not critical. I know wat happened, but is it possible to make my website without that messages? Configuring Apache Webserver in some way?

"Warning: Page has Expired The page you requested was created using information you submitted in a form. This page is no longer available. As a security precaution, Internet Explorer does not automatically resubmit your information for you.

To resubmit your information and view this Web page, click the Refresh button. "

jordy

no that will be impossible.. if it was security will be more then weak and some strange values will be posted.. just code that way it cannot happen without using the back or reload button

inter_joe

i'm sorry to say that's not impossible.
just try this:

session_cache_limiter('private, must-revalidate');

mouloud2001

There is another way, which seems better to me, because it fix some other problems.
I suppose you get this message only on a page which received a POST.
So : always do a header("location : yourpage.php") after you have deal with the information.
Example : one page with a form (form.php), wich go to an other page with a confirmation message (msg.php)
Two possibilities :
1. on form.php, the form point to msp.php (<form action='msg.php'>)
So, on msg.php, you start by dealing with the user submited value, like saving it in a db, and then, you make a location("header:msg.php") which make like a reload, and avoid the error message if you go back with the back button of the browser.
2. The second solution, which a prefer, is to deal with the form on the same page. You make a <form action="form.php"> and you make a header to msg.php after. So, you have always the form, and the code which deal with it on the same php file.

hth

cowboy_x

Fixed a problem that I had too... note that it had to be before a session_start() statement; when the line was inserted after, it had no effect.

gjukema

Hello, I'm having some difficulties along the same line. Here's what I've found :

Including session_cache_limiter('private, must-revalidate'); before the session_start() works for me on pages that are not viewed via a POST action.

If you use session_cache_limiter('none, must-revalidate');, then the browser will display the cached version (even on POSTed pages).

The issue here is that when you modify a session variable on a subsequent page then use the "Back" button in your browser, you only see the cached version, not the new version.

Does anyone know a way around this?

Thanks,
Geoff

mouloud2001

The only solution I found for this problem is the one i posted above : never show a POSTed page. And more generaly, you can always do a header(location) at the end of your php code of every page, so you can control what will appear when the user click on the reload button, or the back button.

gjukema

when using a header("Location: myscript.php"); it went into an infanate loop. My Example :

geoff1.php - sets a session variable, and uses a form POST to go to geoff2.php

geoff2.php - displays the session variable, and has a form POST to geoff2b.php

geoff2b.php - changes the session variable, and displays it

click the browser back button (going back to geoff2.php) and the session variable doesn't re-display with the new value.

So, I tried adding a the location header to geoff2.php, but when I POST from geoff1.php to geoff2.php, I'm in an infanate loop - it never makes it to actually display information on geoff2.php.

mouloud2001

You must put you header(location) into a if statement which test a var of your form (better a specific input hidden)

<?php
//geoff1.php
session_start();
$_SESSION["myvar"] = "monday";
?>
<html><body>
<form name="form" method="post" action="geoff2.php">
<input type="hidden" name="control" value=1>
<input type="text" name="uservar">
<input type="submit">
</form>

</body></html>

<?php
//geoff2.php
session_start();
if (!empty($POST["control"])) {
// Do something with the $POST["uservar"]
header("location:geoff2.php");
}
?>
<html><body>
<form name="form2" method="post" action="geoff2b.php">
<input type="hidden" name="control" value=1>
<input type="text" name="uservar2">
<input type="submit">
</form>

</body></html>

<?php
//geoff2b.php
session_start();
if (!empty($POST["control"])) {
// Do something with the $POST["uservar2"]
$SESSION["myvar"] = "sunday"; // or = $POST["uservar2"]
header("location:geoff2b.php");
}
?>
<html><body>
<?php echo($_SESSION["myvar"]); ?>

</body></html>

hth

gjukema

Your explanation/example worked as required, thanks-you!

Geoff