Refresh Button logging timed out user back in.

[antivirus22]

How can I shut off "refresh" on my website...?

 

[adam0101]

There are lots of ways a user can refresh the page. So let's see...

Hitting F5: You could capture the keypress event, check to see if the key is F5, and cancel it.

Clicking the refresh button or clicking the back button then forward button: Open your site in a window that doesn't have the toolbar, menubar, or address bar.

Right-clicking and selecting refresh: Capture the oncontextmenu event and cancel it.

Opening the page from a bookmark: Hide the menubar and toolbar and capture the CTRL+D keystroke and cancel it to keep them from bookmarking your page in the first page.

Typing in the URL: Hide the address bar so they don't know the URL.

There's still a bunch of ways to do it. Basically, if they're determined, they'll do it. Maybe it would be easier if you set up your security on the page a little differently. How are you authenticating the user?

Adam

http://www.adventex.com

 

[antivirus22]

Im using Magic eDeveloper. In the program there is a timer and after 3 min of idle time, it logs u out. Bu tthe refresh just sends u back to the first page and logs u in, resetting the timer.. I dont know how to get this fixed. Im using SSL

 

[adam0101]

I'm not familiar with that program. So let me see if I understand this correctly. After 3 minutes of idle time a JavaScript function executes and redirects the page to a log off page. If the user hits refresh from the log off page, they're redirected to a page that automatically logs them in. Is this correct? Can you specify your own log off page that doesn't redirect to the log in page? Is the user being sent to the login page after hitting refresh because logout page is in a frameset? If so, can you have the logout page break out of the frameset? Having never used the program, it's hard for me to understand exactly what's going on.

Adam

http://www.adventex.com