I am working on a PHP HTTP authentication system for a web site and I am using sessions so that a user only has to log in once. However the browser caches the name and password so when they click my logout link which ends the session, the browser still remembers the name and password. Therefore the user really isn't logged out and going back to "log in" to the site doesn't even prompt the user for a password.
Obviously this is a huge security hole, but I've found a way to fix it in IE for windows by calling ocument.execCommand("ClearAuthenticationCache") in a javascipt. However this doesn't seem to work on Mac browsers. I was wondering if anyone knows a way to get this effect for all browsers.
Top
