NYCPHP Meetup

[Chris Shiflett]

--- Chris Hubbard <chubbard at next-online.net> wrote:
> What are strategies you've implemented to eliminate the "this page has 
> expired" that commonly gets displayed after a user clicks the back
> button?

You can try:

1. Intermediate processing page that uses a protocol-level redirect, so
that POST data is only ever sent to this intermeiate page.
2. Cache-Control: private
3. Someone else's suggestions. :-)

Chris

=====
Chris Shiflett - http://shiflett.org/

PHP Security Handbook
     Coming mid-2004
HTTP Developer's Handbook
     http://httphandbook.org/