// disable any caching by the browser
header('Expires: Mon, 14 Oct 2002 05:00:00 GMT'); // Date in the past
header('Last-Modified: ' . gmdate("D, d M Y H:i:s") . ' GMT'); // always modified
header('Cache-Control: no-store, no-cache, must-revalidate'); // HTTP 1.1
header('Cache-Control: post-check=0, pre-check=0', false);
header('Pragma: no-cache'); // HTTP 1.0
Even after I use these headers I still can use the back button to see restricted pages after I have logged out of my web application. The browser is still caching the page in IE and FF.
Does anyone know how to fix this problem? I've been trying for awhile. I put the headers at the very begining of the file, a line after <?php. I don't know what else to do. Please help me. I've also tried using meta data to control cache to no avail.
Thanks
Mike