Hi there.

I tried the security of my website (am using DNN 5.1) by logging out and clicking the "Back" button on my browser to determine if I could still access.
Unfortunately, it's yes!

Any idea how do I ensure that when the user has clicked logout, even though he/she clicks "Back" btn on the browser, it will not show the previous page but back to the login page.

Thanks!

We actually set an authenticated cachability value when you're logged in to ensure this does not happen. However, a few people have reported that certain firefox releases do not obey this (probably to squeeze additional speed out of firefox) and serve pages from history even if they're marked as not being cachable. This is a security issue with firefox and not dotnetnuke - i've debated adding additonal code to work around this but it feels wrong to add fixes simply to workaround products that don't follow agreed standards.

Cathal