BV Commerce Forum
»
BV Commerce Support
»
General Support
»
372: OPEN - SP1 bv cart5 - browser back button
Rank: Member
Joined: 4/4/2004(UTC)
Posts: 670
|
after signing out, i can use the back button on my mouse and see sensitive information in the admin while logged out
should this occur?
is there a way to prevent this from occuring?
Scott Mech
|
|
|
|
|
|
Rank: Member
Joined: 9/24/2003(UTC)
Posts: 402
|
There is also no timeout on the admin from a browser. You can leave and come back hours later and go directly to the admin by typing in the bvadmin address. For security reasons there should also be a timeout period specified by the admin in the admin panels.
|
|
|
|
|
|
Rank: Member
Joined: 3/1/2006(UTC)
Posts: 1,142
|
We have a function in Utilities.WebForms.MakePageNonCacheable that we use on the checkout pages. This can be called from the Page_Load event in this manner
Utilities.WebForms.MakePageNonCacheable(Me)
We will analyze this for inclusion in a future service pack as long as it does not introduce any issues. |
Justin Etheredge
Senior Software Engineer
BVSoftware |
|
|
|
|
|
Rank: Member
Joined: 3/1/2006(UTC)
Posts: 1,142
|
Actually, you could add it into the Page_Load event of the BaseAdminPage, but I cannot guarantee that there will be no side effects since it has not been tested. |
Justin Etheredge
Senior Software Engineer
BVSoftware |
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 1,786
|
Scott,
Is your store configured to remember users and auto-login? If so, the site will log you right back in.
Also, what browser are you using? Firefox keeps cached versions of pages on disk even if there is no internet connection.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.