Hi, :)

I have already tried the idea from the following link:

http://p2p.wrox.com/topic.asp?TOPIC_ID=36049

On every restricted page, i have included this link
<a href="signout.asp" target="_parent">Sign Out</a>

on signout.asp
<%
  Session.Abandon()
  Response.Redirect("index.htm")
%>

But it not working. I still can go in to restricted page by key the URL and press back button.

Am i miss out something?

Could anyone give me advice?

Thank you
Selina

Hi you can always go there if you press the back button. Place page expires as -1 or something below time so that when it is accessing it will expire. More over use Javasceipt to check cookies (if used) and try to reload.

Albert Arul Prakash
http://www.bepenfriends.com

Not only press the back button will go back to the restrited page...key in the URL also can go in the restricted page after pressed signout.

What do u mean "Place page expires as -1"? isnt when onload the page?

Thank
Selina

If you are calling Session.Abandon() and afterwards you can still go to your restricted pages, its a logic problem. Meaning you are not correctly checking for the presence of some value.

-------------------------
I will only tell you how to do it, not do it for you.
Unless, of course, you want to hire me to do work for you.

^^Thats my signature