Thanks Michael,

Can you suggest any other method (without using session_start)
by which I can track users and validate for each page.

What I do currently , in the login page register the user using sessions
and in other pages see if user is registered.

I need to restrict each page based on mysql table page access right
against each user.

Thanks,
Bibhas


Michael Egan wrote:
> 
> Bibhas,
> 
> I'm sure I've read somewhere that this is a deliberate security feature with using 
> sessions - i.e. you can't view contents of form fields by using the back button on 
> your browser.
> 
> Couldn't you use JavaScript to ensure that the data is validated on the client side 
> before the form is submitted?
> 
> Regards,
> 
> Michael Egan
> 
> -----Original Message-----
> From: Bibhas Kumar Samanta [mailto:[EMAIL PROTECTED]
> Sent: 25 June 2003 14:26
> To: [EMAIL PROTECTED]
> Subject: [PHP] sessions and browser back[Scanned]
> 
> Hi,
> 
> I am trying to create restricted pages for my php/mysql/apache
> server with sessions and passing session varibales to other pages for
> validation.
> 
> Eventually I am doinng session_start() at the begining and
> checking whether logged in user is authorised to use this page
> by a routine.
> 
> Now problem is, if filled in data in the form is incorrect, the forms
> gives an error. But when I press browser BACK button to get the
> filled in form , the form seems to get reset with _no_ data.
> 
> When I try without session_start() at the begining  of form , things
> seem to behave normally.
> 
> Does session_start() reset the form  and I guess browser should
> have returned be by fiiled in page from cache ?
> 
> Please help
> 
> -Bibhas
> 
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to