|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Sessions/Cookies?Hi there,
I have an internal web site running in a Windows Server 2003 Active Directory domain. I've set it to NOT allow annonymous access so that users are requested for their username/password when they access it. I've also got a logoff button on the website which I want to do exactly that (log them off), which redirects them to a 'successfull logoff' page. However, they can press the back button to go back to the main page. I know it'a not as simple as just naming the file logoff.asp, but how can I achieve a 'proper' logoff, so that any further requests require them to log back on. Thanks very much/... destory all the session variables and cookies on that page
and/or set them to blank.. either way Show quoteHide quote "Andy Smith" <Andy Sm***@discussions.microsoft.com> wrote in message news:F8C9E56C-1885-4566-9D11-6BA97292C603@microsoft.com... > Hi there, > > I have an internal web site running in a Windows Server 2003 Active > Directory domain. I've set it to NOT allow annonymous access so that users > are requested for their username/password when they access it. I've also > got > a logoff button on the website which I want to do exactly that (log them > off), which redirects them to a 'successfull logoff' page. However, they > can > press the back button to go back to the main page. I know it'a not as > simple > as just naming the file logoff.asp, but how can I achieve a 'proper' > logoff, > so that any further requests require them to log back on. > > Thanks very much/... > a) How are you "logging" the user's off?
b) Does this help? http://www.adopenstatic.com/cs/blogs/ken/archive/2005/04/12/14.aspx Cheers Ken Show quoteHide quote "Andy Smith" <Andy Sm***@discussions.microsoft.com> wrote in message news:F8C9E56C-1885-4566-9D11-6BA97292C603@microsoft.com... : Hi there, : : I have an internal web site running in a Windows Server 2003 Active : Directory domain. I've set it to NOT allow annonymous access so that users : are requested for their username/password when they access it. I've also got : a logoff button on the website which I want to do exactly that (log them : off), which redirects them to a 'successfull logoff' page. However, they can : press the back button to go back to the main page. I know it'a not as simple : as just naming the file logoff.asp, but how can I achieve a 'proper' logoff, : so that any further requests require them to log back on. : : Thanks very much/... : That works absolutely perfectly!
Thank you very much. ;) Show quoteHide quote "Ken Schaefer" wrote: > a) How are you "logging" the user's off? > > b) Does this help? > http://www.adopenstatic.com/cs/blogs/ken/archive/2005/04/12/14.aspx > > Cheers > Ken > > -- > Blog: www.adopenstatic.com/cs/blogs/ken/ > Web: www.adopenstatic.com > > > "Andy Smith" <Andy Sm***@discussions.microsoft.com> wrote in message > news:F8C9E56C-1885-4566-9D11-6BA97292C603@microsoft.com... > : Hi there, > : > : I have an internal web site running in a Windows Server 2003 Active > : Directory domain. I've set it to NOT allow annonymous access so that users > : are requested for their username/password when they access it. I've also > got > : a logoff button on the website which I want to do exactly that (log them > : off), which redirects them to a 'successfull logoff' page. However, they > can > : press the back button to go back to the main page. I know it'a not as > simple > : as just naming the file logoff.asp, but how can I achieve a 'proper' > logoff, > : so that any further requests require them to log back on. > : > : Thanks very much/... > : > > >
unable to authenticate to IIS 6
IIS 6 and SQL Server - two seperate boxes IIS 6 Logfiles inherit permissions attribute Authentication doesnt work when using non - microsoft browsers :-( restricted directory does not work IIS ActiveX Component - No fonts creatable Error on Cert Request Integrated Authentication in an Intranet webdav and Windows 2000 users Certification Authority |
|||||||||||||||||||||||