PHP Authentication

[Anon]

I need to allow a user who has logged in to a restricted area (and thus set the $PHP_AUTH_USER and $PHP_AUTH_PW vars) to be able to logout. How can the two variables be permanently cleared so that the user must again log in when going back to the restricted area.

Abiel Reinhart
[e-mail]

[Anon]

Hi!

I've created a session with a variable calles $access. This variable contains "granted" or "denied". When the user logged out, i write "denied" in the variable. So he can't get back.

I've tried to destroy the session, but that hasn't worked properly. In that case, the user can go back with the browsers back-button.

Try www.reformnet.de and try "buying" some things. You must authentificate yourself in the customerarea. Have no fear, no articles will be delivered, it's my exam-project.

[Anon]

In the "back-button" case, the browser is retrieving from cache, if the previous page is a "post" page, however the browser (Ie) will warn of expired page....