When loged out a subscriber can still see protected pages.

Discussion in 'Setting-up protection' started by mikemdiv, Sep 9, 2009.

  1. mikemdiv

    mikemdiv aMember Pro Customer

    Joined:
    Aug 13, 2009
    Messages:
    1
    Hi, I got th esite loaded. It seems to work ok (always alot to learn) but when I go and log out the protected folder still shows its contents like the pages I have in it. It works right until logout.
    Cant see them before login as designed but still can after logout still, just for the subscriber (that lasts for one month). Does it close up after the subscriptions over? Really need it to close up after logout.
    Can you help me get this strightened out?
  2. AQUARiUSQ

    AQUARiUSQ New Member

    Joined:
    Oct 29, 2009
    Messages:
    3
    My 2 cents

    Just my 2 cents, but wouldn't that be content served from the browser's cache?
    That's simple to test. You would only be able to access protected content that is actually IN the browser's cache after logout.
    And that's not really a problem, because only a legitimate user had access to it in the first place.

    frostyX
  3. wgrismore

    wgrismore aMember Pro Customer

    Joined:
    Oct 16, 2009
    Messages:
    3
    Logout but still Logged in. Same problem Clearing cache doesn't help

    I clear all cookies, History, and Temp file in IE8. Even try to load site directly with F5 to bypass cache.

    I know that my user has a legit account and had logged in before. But, shouldn't the logout truely log the user out?

    What type of authentication does this use?

    The bottom line is I am WAY more concered with making sure my users can login than logout that is for sure. However, it would be a nice feature to have them truely logout if they choose to.

    For example you have a situation where one user is sharing his or her computer with another users and doesn't want the other user to have access to my site!!

    And that other user not being a subscriper might try to rip my content.

    Assuming it is a one person computer is not really to big of an issue but for the reasons stated I think it should work.

    There must be something simple I am missing somewhere in the config files or pathing to make sure the logout works.

    Any help would be great. Also is anyone aware of a time out feature for inactivity?

    Thanks in advance,

    Grizz
  4. davidm1

    davidm1 aMember User & Partner

    Joined:
    May 16, 2006
    Messages:
    4,437
    They should be getting logged out - totally.
    Why protection method are you using?

    & send in a tech support ticket.

    David

Share This Page