user access

wxdqz

New Member
i have a code below:
<html>
<script language="vbscript">
sub ex
a=f1.t1.value
msgbox(a)
b=f1.t2.value
msgbox(b)
if (a <> b) then
msgbox "error"
exit sub
else
f1.submit
end if

end sub
</script>
<body>
<form action="c:\a1.html" name=f1>
<input type=text name=t1>
<input type=text name=t2>
<input type=button value=http://www.webdeveloper.com/forum/archive/index.php/"submit" onclick=ex()>
</body>
</html>


now if the username and password match, the user is directed to the file c:\a1.html. when the user goes to the next page and press the back button he comes back to this page containing the code above.now if he presses the forward button in the toobar of the IE browser he is been forwarded to the next page without validating the username and the password.
how to prevent this
 
Back
Top