Disable Browser Back Button So That Can't Go Previous Pages After Signout

Actually i would like to stop user from back to the previous page once logout. For this situation, my plan is to write down a cookie once logout (check the “SetLogoutCookie” function), and read the cookie once page load for every online page except login.aspx (check the “RedirectToLoginPage” function). If the data in cookie means that logout then redirect current page to login.aspx. as an example, I actually have provided the subsequent code for your reference. Hope it’s useful to you.

ASP.NET Code for Default page:


<html xmlns="http://www.w3.org/1999/xhtml" >
<head runat="server">
    <title>Untitled Page</title>
    <script type="text/javascript">
        function SetLogoutCookie(value)
        {
            var exdate=new Date();
            exdate.setDate(exdate.getDate()+1);
            var expires = "; expires="+exdate.toGMTString();
            document.cookie = "logout=" + value + expires+"; path=/";
        }

        function Checklogout()
        {
            var c_start = document.cookie.indexOf("logout=");
            if (c_start!=-1)
            {
                c_start=c_start + 7;
                c_end=document.cookie.indexOf(";",c_start)
                if (c_end==-1)
                {
                    c_end=document.cookie.length;
                }
                if(document.cookie.substring(c_start,c_end) == "true")
                {
                    return true;
                }               
            }
            return false;
        }

        function RedirectToLoginPage()
        {
            if (Checklogout())
            {
                window.location = "login.aspx";
            }
        }
    </script>
</head>
<body onload="RedirectToLoginPage()">
    <form id="form1" runat="server">
    <div>
        <asp:LinkButton ID="LinkButton1" runat="server" OnClick="LinkButton1_Click" OnClientClick="SetLogoutCookie('true')">Log out</asp:LinkButton>
    </div>
    </form>
</body>
</html>

<title>Untitled Page</title>

function SetLogoutCookie(value)

{

var exdate=new Date();

exdate.setDate(exdate.getDate()+1);

var expires = "; expires="+exdate.toGMTString();

document.cookie = "logout=" + value + expires+"; path=/";

}

function Checklogout()

{

var c_start = document.cookie.indexOf("logout=");

if (c_start!=-1)

{

c_start=c_start + 7;

c_end=document.cookie.indexOf(";",c_start)

if (c_end==-1)

{

c_end=document.cookie.length;

}

if(document.cookie.substring(c_start,c_end) == "true")

{

return true;

}

return false;

}

function RedirectToLoginPage()

{

if (Checklogout())

{

window.location = "login.aspx";

}

</script>

</head>

<div>

<asp:LinkButton ID="LinkButton1" runat="server" OnClick="LinkButton1_Click" OnClientClick="SetLogoutCookie('true')">Log out</asp:LinkButton>

</div>

</form>

</body>

</html>

C# Code for Default page:


protected void LinkButton1_Click(object sender, EventArgs e)
{
      FormsAuthentication.SignOut();
      FormsAuthentication.RedirectToLoginPage();
}

protected void LinkButton1_Click(object sender, EventArgs e)

{

FormsAuthentication.SignOut();

FormsAuthentication.RedirectToLoginPage();

}

ASP.NET Code for Login page:


<html xmlns="http://www.w3.org/1999/xhtml" >
<head runat="server">
    <title>Untitled Page</title>
    <script type="text/javascript">
        function SetLogoutCookie(value)
        {
            var exdate=new Date();
            exdate.setDate(exdate.getDate()+1);
            var expires = "; expires="+exdate.toGMTString();
            document.cookie = "logout=" + value + expires+"; path=/";
        }
    </script>
</head>
<body>
    <form id="form1" runat="server">
    <div>
        Name:<asp:TextBox ID="TBName" runat="server">test</asp:TextBox>
        <br />
        Password:<asp:TextBox ID="TBPassword" runat="server" TextMode="Password"></asp:TextBox>
        <br />
        <asp:LinkButton ID="LinkButton1" runat="server" OnClick="LinkButton1_Click" OnClientClick="SetLogoutCookie('false')">Login</asp:LinkButton></div>
    </form>
</body>
</html>

<title>Untitled Page</title>

function SetLogoutCookie(value)

{

var exdate=new Date();

exdate.setDate(exdate.getDate()+1);

var expires = "; expires="+exdate.toGMTString();

document.cookie = "logout=" + value + expires+"; path=/";

}

</script>

</head>

<body>

<div>

Name:<asp:TextBox ID="TBName" runat="server">test</asp:TextBox>

<br />

Password:<asp:TextBox ID="TBPassword" runat="server" TextMode="Password"></asp:TextBox>

<br />

<asp:LinkButton ID="LinkButton1" runat="server" OnClick="LinkButton1_Click" OnClientClick="SetLogoutCookie('false')">Login</asp:LinkButton></div>

</form>

</body>

</html>

C# Code for Login page:


protected void LinkButton1_Click(object sender, EventArgs e)
{
    if (FormsAuthentication.Authenticate(TBName.Text, TBPassword.Text))
    {
        FormsAuthentication.RedirectFromLoginPage(TBName.Text,false);
    }
}

protected void LinkButton1_Click(object sender, EventArgs e)

{

if (FormsAuthentication.Authenticate(TBName.Text, TBPassword.Text))

{

FormsAuthentication.RedirectFromLoginPage(TBName.Text,false);

}

Code for Web Config:


<authentication mode="Forms">
        <forms name="appNameAuth" path="/" loginUrl="login.aspx" protection="All" timeout="30">
          <credentials passwordFormat="Clear">
            <user name="test" password="test" />
          </credentials>
        </forms>
      </authentication>
      <authorization>
        <deny users="?" />
</authorization>