I tried your option 2 and it worked great! Not sure if that degrades performance or not but getting rid of those annoying messages is much worse that a slight degradation to me!
Thanks! "Egil Helland" <[EMAIL PROTECTED]> wrote in message 20011118233831.BGQY4910.mta01@workhorse">news:20011118233831.BGQY4910.mta01@workhorse... On Sun, 18 Nov 2001 12:01:11 -0600, Troy Moreland wrote: >Can someone tell me how to get around the following problem: > >I am using sessions to store a person's ID and password that they >authenticate with at the start page. The entire web site is secured >this way. The problem is that hitting the back key often gives the >"This page has expired, hit Refresh to Reload" kind of message. How >can this be avoided? I've written the same application without >sessions (unsecure obviously) and I don't get asked for refreshes at >all. > >Thanks, Troy Moreland > Hi Troy, AFAIK, there are two solutions to this problem. 1. Switch from the POST to GET method when you are supplying your information for your site. This is a problem related to the way POST messages are handled (its sent as a separate data package in fact) by the web browser, and with get, this is of course in your URL and thus also handled by default 2. Edit your php.ini file and set the cache limiter to nothing (session.cache_limiter=;). This will fix the problem for all your POST forms, for all web pages. If you only want this done for part of your website, do it with headers instead, eg: session_start(); header("Cache-Control: "); header("pragma: "); blah blah blah... Hope this helps! ;) Cheers, Egil -=// Egil Helland / IKON AS - MCSE, Internet, Intranet mailto:[EMAIL PROTECTED] http://egil.net //=- -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]