Whenever I click on logout button it Redirect me to login page but when im clicking on back button it redirect me to last visited page. I am not using membership or Windows Authentication.
Session.Abandon();
Response.Cache.SetCacheability(HttpCacheability.Private);
Response.Cache.SetCacheability(HttpCacheability.NoCache);
Response.Redirect("LoginForm.aspx");
If you are using session then destroy the session value on logout button click and you can put the check like this in your app webpages
if(Session["sessionvaribale"].Equals(null))
{
Response.Redirect("logoutpage url");
}
what kind of authentication do you use then?
In c# the code for logging out with forms authentication would be:
// body of function
FormsAuthentication.SignOut();
HttpContext.Current.Response.Redirect("Login.aspx", true);
One of the reason is the page is being cached by browser and load the from there. In case you do not want in any case to see any page after logout , use the no-cache for all the pages
If you're using FormsAuthentication, you might want to signout using its method too.
Session.Abandon();
FormsAuthentication.SignOut();
Response.Redirect("index.aspx");
Clearing cache doesn't work in all browser and I found in my experiments that user can go back to previous page after loging out. Hence you may want to use JavaScript to prevent user going back, once he logs out.
Below article outlines the same thing:
It works cross browser.
Apart from that you may want to check below post, that works too:
on logout click first make the session null
Session.Abandon();
Session.RemoveAll()
Session.Clear();
any one
then after if you are using master page, that is better in case of multiple page,
just check on masterpage load event if session is null then move to login page
if you are not using master page then check if session is null for each page
