Warning: Page has Expired

Bhoomika

Hello Friends

i m developing a search engine. I create a new phpsession id with every new search and store it with the query result in to a result table from where i generate pagination pages. and maintain same phpsession id through out the session.

now when i go back by Internet Explorar's back button before the search engine page i got this warning message.

The page you requested was created using information you submitted in a form. This page is no longer available. As a security precaution, Internet Explorer does not automatically resubmit your information for you.

To resubmit your information and view this Web page, click the Refresh button.

why its comming and what should i do to avoid it.?

and also in search engine page the text box which contains search text , the text box becomes empty as i go back by back button .
is it the problem because of phpsession or any thing else.?

any help will be appreciated

Bhoomika

tomkleijkers

Hi,

The problem you seem to have is that you sent your form data as POST variables. POST will expire if you hit the back button and internet explorer asks you to repost. Try using GET because the information you enter in a search engine is always sent trough GET.

2cents

if you have access to your ini file, you can try refer and set it

; Document expires after n minutes.
session.cache_expire = 180

Bhoomika

Thank you very much friend tomkleijkers

warning problem is over.

But now second prolem.

when i enter some text in search text box and got some result if i go back by back button of IE"s to the search engine page ,the search text should be there in the text box (somthing like google) this isn't happen in my page.

please help me.

Bhoomika

tomkleijkers

Try storing the information in a $_SESSION['textfield'] var and give the textbox the value:

<? if(isset($_SESSION['textfield'])) echo $_SESSION['textfield']; ?>

srikanth1184

I have to use $_POST for security reasons.

But i don't want page expired warning...!!
can you explain me please..

tomkleijkers

I have to use $_POST for security reasons.

POST isn't secure. It can be intercepted or faked. Try another security, like a md5-string (like hotmail does) if you want to send information without page-expired-error.

srikanth1184

I know $_POST can also be faked. I have a few reasons

I personally somehow don't like anything on address bar except the address.
Most of the application has POST variables. So for this change i can't afford to change all the files.
Some forms are very big it almost has like 100 fields.
There is a limit for query string. I guess 32kb.

So I have to stick with POST.

Any ideas will be greatly appreciated

tomkleijkers

It's not possible to disable the warning from a browser. This error is browser-based. The only solution is when you submit from page A, you submit to page B. This page saves the form values to session vars.

Page B displays an empty page (Like: 'Please wait while submitting') and links further to page C which displays whatever you want. If your guest hits the back button now, he'll be linked to page B. When you see that, you make a script which returns to the form on page A and fills in everything using the session-vars.

Understand?

(Not really clear, but i'm in a hurry now)

srikanth1184

That make sence. I see what you mean!!

So the conclusion is to make it work i have to change the coding
style. Anyways thanks for all your help Tom !!