Back Button and SSL Connection

[Bob Hunt]

I'm wondering if anyone else has encountered this and come up with a solution;

I've found that if I use Web Connector, and the directory in quesiton is secure under SSL, than any page that was landed on by way of a form based CDML tag cannot be gotten back to by way of the browsers' 'Back' button. The same page will work fine if it is in a non-secure directory. Has anyone seen and solved this before me?

very eager to know.

thanks in advance for any assistance.

[scratchmalogicalwax]

Do you get "This Page has Expired" error?

[Bob Hunt]

no, I get HTTP:404 error message. The only 'solution' I have now is to modify the 404 text that the server puts out so that it provides a note to the users not to use their browser's Back button but to use the one's I've coded into the page instead....

woe's me...

[Arin]

I was thinking there might be a way to make your SSL security a little more relaxed, to solve this, but isn't it really a blessing in disguise?

I've seen numerous other posts where people were looking for a "Security" solution so "user B" wouldn't be allowed to sit down at a machine that "user A" just finished using and click "Back" to see private info...

If you simply build your own "back" button into the layout, and encourage your users to use that instead of the browser button for "security purposes" then your proposed problem has just become another's solution.

_____________________________________________________

"And we know that all things work together for good to them that love God, to them who are the called according to his purpose." -Romans 8:28

[Arin]

I've experienced the same problem using FMP Unlim 5 (WSC running on Mac OS X Server v1.2 - Apache w/ mod_ssl)

Is there a fix in FMP 5.5?

[Anatoli]

Another way will be to remove the URL from Back button and warn people, that there is no path from Secure page to Unsecured via Back button.

[Anatoli]

Good point!