Forum Moderators: phranque
All passwords are grabbed from a database and it's a system that's been working fine without touching it for some time now.
Unfortunately, the axiom "don't fix what ain't broke" is not going to work here because there's been a request from on high, to add a "logout" button to the password protected area.
I found in a search of the forum that this is a browser enabled cache issue and that there is no way to add a logout function to an ".htaccess" password protected area. Fair enough, but the post was a couple years old. Has anything changed since then?
I know this can be done - my bank does it - what other scripts or programming out there will allow a login and logout password protected area?
Just doing research now, because if it's going to cause an entire over haul of the password protected area and the interface with the database they might decide it's now worth it.
Any advise, resource, or suggestions? Thanks.
I haven't ever really used .htaccess, but you are correct - there are plenty sites that have login and logout facilities.
We have a few sites that have login / logout. We use ASP and SQL server, then use sessions to hold all the details of the user for constant checking that they are who they say they are.
Our logout is actually very simply compared to the login. The logout.asp page simple deletes / clears all sessions connected with our site.
If the user then tries to access another page of our site then the security function will realise that all sessions are now empty and therefor the user should not be allowed back in.
Not exactly what you are looking for i don't think, but hopefully it is of some help.
