Problem with session and "back" in browser

[eluser]BrianDHall[/eluser]
Um, if you click 'back' are you sure the page is being reloaded and isn't cached? Have you tried sending a no-cache header on pages where a user is logged in?

If you can reload the page, try setting the value of the main variable you check to an empty string

Code:

$this->session->userdata('logged_in') == '';

and then kill the session. Changes to a variable are instant in all session types, whereas destroying the session is not always instantaneous.

I first learned of this problem with the native PHP session library, years ago. It was no surprise to me how the native session library behaved because of that...well, that's not true. I was surprised because I expected the CI implementation to be better in this regard.

However once you know the inherent limitations with sessions you easily adjust to doing things a certain way so it won't effect your programs anymore.

Try this and make sure you aren't just going back to a cached page before you throw everything out and start using native sessions, as I think you'll find that they are just about as big a pain in the ass as any other implementation is.