Secure Folder Question

[RFH Reseller: MWF]

How do the log-in sessions work with secure folders?

Is there anyway of allowing someone to log out at all?

For instance if I log-in I can leave the site and come back to the secure pages without having to log-in again. Also when I close the browser and return pages within the secure area show up until I hit refresh.

[Staff: Warren Ashcroft]

How do the log-in sessions work with secure folders?

Is there anyway of allowing someone to log out at all?

Its standard HTTP auth, within the HTTP protocol - not a login system based on sessions/cookies. To clear the authenticated HTTP session, the browser needs to be restarted.

For instance if I log-in I can leave the site and come back to the secure pages without having to log-in again. Also when I close the browser and return pages within the secure area show up until I hit refresh.

This would be the cache, wouldnt actually be the real file from the secured folder.

[RFH Reseller: MWF]

I see.

Thanks for the info. I need to convince my MD that it's a secure system as he's bothered about someone jumping on his machine after he's used it and going back to the secure pages.

[RFH Reseller: MWF]

OK what I've done is used meta-tags to stop the browser caching the content and it seems to work well

[Staff: Warren Ashcroft]

OK what I've done is used meta-tags to stop the browser caching the content and it seems to work well

Out of interest, which meta tags?

[RFH Reseller: MWF]

Out of interest, which meta tags?

I just did a Google search and the sites found suggested using

<meta http-equiv="PRAGMA" content="NO-CACHE">

[Staff: Warren Ashcroft]

Ah OK