Return-Path: Delivered-To: apmail-struts-user-archive@www.apache.org Received: (qmail 96173 invoked from network); 26 Jul 2007 03:38:12 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 26 Jul 2007 03:38:12 -0000 Received: (qmail 32262 invoked by uid 500); 26 Jul 2007 03:38:04 -0000 Delivered-To: apmail-struts-user-archive@struts.apache.org Received: (qmail 32236 invoked by uid 500); 26 Jul 2007 03:38:04 -0000 Mailing-List: contact user-help@struts.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "Struts Users Mailing List" Reply-To: "Struts Users Mailing List" Delivered-To: mailing list user@struts.apache.org Received: (qmail 32225 invoked by uid 99); 26 Jul 2007 03:38:04 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 25 Jul 2007 20:38:04 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of paulus.benedictus@gmail.com designates 64.233.166.179 as permitted sender) Received: from [64.233.166.179] (HELO py-out-1112.google.com) (64.233.166.179) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 25 Jul 2007 20:38:02 -0700 Received: by py-out-1112.google.com with SMTP id p76so774591pyb for ; Wed, 25 Jul 2007 20:37:41 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:reply-to:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding:sender; b=A14dJ7bdQWCJ7H5m3nzNA/PdPLgoOIAwqs5CLCMUx4V8Y+rgFKMixpy6l7bJ81/JRFRQ/0uItI0GUTfDLz//MufofD+wUAvqDsoFBmSCgiN+wJGZO8eFIJBa6ZyFXWRx+/BU6t5jdqLd/1MG1uO8Rge6izaFRfk12I0ASY/KJ9g= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:reply-to:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding:sender; b=PNJkFLjHlAp7DZd5yMVnWQ0iGUosaRXydjZ1ClewLvXEahLlnhVrsosVh15bbqn4n/n1mUZIs+bBZn6vEcR5SeMQMjGUYp1deWUO18PX7a5IPwosjzufgrQEHD0gB2+WI/veELoQFDvdINKiltG6kzbkRjMqSrLRbq/dsbEa6Po= Received: by 10.35.93.1 with SMTP id v1mr2069299pyl.1185421061471; Wed, 25 Jul 2007 20:37:41 -0700 (PDT) Received: from ?192.168.11.3? ( [65.30.71.168]) by mx.google.com with ESMTPS id 19sm4799859nzp.2007.07.25.20.37.39 (version=TLSv1/SSLv3 cipher=RC4-MD5); Wed, 25 Jul 2007 20:37:39 -0700 (PDT) Message-ID: <46A81706.3050501@apache.org> Date: Wed, 25 Jul 2007 22:37:42 -0500 From: Paul Benedict Reply-To: pbenedict@apache.org User-Agent: Thunderbird 2.0.0.5 (Windows/20070716) MIME-Version: 1.0 To: Struts Users Mailing List Subject: Re: Is there a way to remove browser cache once the user clicks the log out button? References: <11803569.post@talk.nabble.com> In-Reply-To: <11803569.post@talk.nabble.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: Paul Benedict X-Virus-Checked: Checked by ClamAV on apache.org Do not cache pages when the user is logged in. That's the answer :-) semaj.najraham wrote: > Hi guys, > > Hope someone can reply me. I removed the browser cache in my application > using a servlet filter so that if the user clicks the log out button (which > invalidates the session), he/she cannot see the pages he visited using a > browser back button. Of course, if I don't remove the cache, he/she sees the > visited page and when clicks on any links/buttons, the application will take > to the login page. > > My only concern is that I have wizard like page flow so if the user clicks > the previous button whatever he/she types in the current page will be gone. > > Therefore, I would like to know if there is a way to remove the browser > cache only after the user clicks the log out button? > > Thanks, > semaj > --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscribe@struts.apache.org For additional commands, e-mail: user-help@struts.apache.org