Logout Problem in forms authentication

[SreejithAchutan]

Hi Friends, i have used aspnet authentication to logging into my site.When i click logout and i click back button,i can see the last page.How can i logout properly.I used FormsAuthentication.Signout() to logout.What is the problem of dont properly logout fro site.

[kumar_k508]

Hi, After clicking the logout button,the all the cookies will be cleared... and when you click on back button it shows only UI and links... if you want you can test it by clicking any link (button/link),you will not get any user information and automatically it will redirects to your redirected page.. if not like that,you have to clear all the cookies and abonden all the session variables

S Kumar

[SreejithAchutan]

How can i clear all cookies when we click on logout.

[kumar_k508]

Hi, 'clears formsauthentication cookies Response.Cookies.Remove(FormsAuthentication.FormsCookieName) 'clears all sessions variables of application Session.RemoveAll() Session.Abandon()

S Kumar

[SreejithAchutan]

Hi Friend, I Given the code but it willnot cleared the cookie and i can took all datas,it willnot ask again to login.

[kumar_k508]

HI, Are you redirecting from that page to some other page (generally login page) whenever page losses cookie value...?

S Kumar

[SreejithAchutan]

Hi, Actually i put a login control in masterpage enabled page and i put menu in masterpage.in the menu i put a menuitem logout and in the menu item click event i given formsauthentication.signout and the above given code.and i retdirect the page to home page where the login control, is situated.This is the flow of login and logout.After logout i checked username is null or not in another menuitem page.but i can easily access the page because the username still exists.What is the problem.

[kumar_k508]

Hi, you can do like this also ...just by using javascript you can disable back button (but this is not good practice).... ;)

S Kumar

[kumar_k508]

HI, you can check the formsauthentication cookie information in the masterpage's page_load event.. if the cookies value is nothing simply redirect to login page

[SreejithAchutan]

Not when i click the back button when i click any menu link also i can easily access the datas without logged in.

[rakeshs312]

Hi, In your first page, paste this code in pageload

Response.Cache.SetExpires(DateTime.UtcNow.AddMinutes(-1));
Response.Cache.SetCacheability(HttpCacheability.NoCache);
Response.Cache.SetNoStore();

[kumar_k508]

hi, what are modifications that you are done?

S Kumar

[kumar_k508]

Hi, just check the cookie information is either available or not in master page's page load event,if values are nothing just redirect to login page...

S Kumar

[SreejithAchutan]

Sorry to say again it works wrongly.the user can access pages after paster the page in pageload of first page.

[SreejithAchutan]

Thanks for your corordination sir...

[SreejithAchutan]

Hi Kumar Sir, I got it sir.Actually we have to given Formsauthentication.LoginUrl then it cleanely works.