PDA

View Full Version : A Disable the Back Button Hack


admin
06-04-2003, 04:09 PM
Name this first page default.asp

<%
Response.Expires = -1
Response.ExpiresAbsolute = Now() - 1
Response.AddHeader "pragma", "no-cache"
Response.AddHeader "cache-control", "private"
Response.CacheControl = "no-cache"

dim qString: qString = Session("qString") & "&back=y"
dim strHead: strHead = "<html><head></head><body>"
dim strFoot: strFoot = "</body></html>"

if Session("submitted") = "yes" then
response.write strHead
response.write "<script language=""JavaScript"">"
response.write "location.replace(""page2.asp?" & qString & """);"
response.write "</script>"
response.write strFoot
response.end
end if

response.write strHead
response.write "<form action=""page2.asp"" method=""get"">"
response.write "type something in:<br>"
response.write "<input type=""text"" name=""something""><br>"
response.write "<input type=""submit"">"
response.write strFoot
%>

Name this page page2.asp

<%
dim strHead: strHead = "<html><head></head><body>"
dim strFoot: strFoot = "</body></html>"

dim BackCheck: BackCheck = request("back")
dim strSomething: strSomething = request("something")

Session("qString") = request.QueryString
Session("submitted") = "yes"

response.write strHead
if BackCheck = "y" then
response.write "hey, you tried to go back!<br><br>"
end if
response.write "you wrote: " & strSomething
response.write strFoot
%>

By Greg Diamond aka Fid