"Log Out" from restricted folder

how two question

[jaschulz]

I have a folder (on a site hosted by Earthlink) to which I have restricted access to qualified users with passwords. It works fine. However, authentication seems to persist even after the user leaves the folder in question. The only way to terminate the authentication seems to be to close the browser. How can I provide my users with a "Log Out" button that will effectively cancel their current authentication and require them to reenter username and password if they want to return to the folder in question?

thanks,

JAS

[bird]

What you're describing is the situation with "basic" autentication. Since this simply means that the browser remembers and resends the username/password with each request, there's no good way to log out other than quitting the browser.

If you want an explicit logout procedure, then you need to autenticate your users through a cookie. This gives you the possibility to expire/invalidate any specific cookie on the server.

[jaschulz]

I see. Thanks.