# Session not getting destroyed on Logout

**URL:** <https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354>\
**Category:** Rails\
**Created:** [December 10, 2008, 11:34pm UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354 "2008-12-10T23:34:03Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jack](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/cc9497/32.png) [@jack](https://www.ruby-forum.com/u/jack)\
**Post date:** [December 10, 2008, 11:34pm UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354/1 "2008-12-10T23:34:03Z")

</div>

Hi,  
I’m trying to destroy session when user clicks logout in  
rails…Here is the code:

def logout  
reset\_session  
redirect\_to  
CASClient::Frameworks::Rails::Filter.client.logout\_url  
(request.referer, url\_for (:controller =\> ‘site’, :action =\>  
‘myportal’))  
end

However, when I click the back button, it shows me the page with all  
information. If the session is destroyed, it should not display the  
page, right?

What could be the issue?

Appreciate any help!!

Thanks!

---

<div class="post-metadata">

**Author:** ![jack](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/cc9497/32.png) [@jack](https://www.ruby-forum.com/u/jack)\
**Post date:** [December 10, 2008, 11:34pm UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354/2 "2008-12-10T23:34:03Z")

</div>

On Dec 10, 10:22 pm, Jack [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> However, when I click the back button, it shows me the page with all  
> information. If the session is destroyed, it should not display the  
> page, right?
> 
> What could be the issue?

Your browser’s cache

Fred

---

<div class="post-metadata">

**Author:** ![jack](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/cc9497/32.png) [@jack](https://www.ruby-forum.com/u/jack)\
**Post date:** [December 10, 2008, 11:57pm UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354/3 "2008-12-10T23:57:26Z")

</div>

The Back button is just a LOCAL browser history navigation command, if I  
remember correctly.

---

<div class="post-metadata">

**Author:** ![jack](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/cc9497/32.png) [@jack](https://www.ruby-forum.com/u/jack)\
**Post date:** [December 11, 2008, 2:15am UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354/4 "2008-12-11T02:15:29Z")

</div>

If I want to redirect the user back to the login page when back is  
hit, what code do I need to put in?

Thanks!

---

<div class="post-metadata">

**Author:** ![jack](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/cc9497/32.png) [@jack](https://www.ruby-forum.com/u/jack)\
**Post date:** [December 11, 2008, 9:30am UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354/5 "2008-12-11T09:30:17Z")

</div>

On Dec 11, 1:14 am, Jack [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> If I want to redirect the user back to the login page when back is  
> hit, what code do I need to put in?

The problem you might find is that your server isn’t hit at all. The  
browser just pulls up its cached copy of the page.

Fred

---

<div class="post-metadata">

**Author:** ![jack](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/cc9497/32.png) [@jack](https://www.ruby-forum.com/u/jack)\
**Post date:** [December 11, 2008, 5:38am UTC](https://www.ruby-forum.com/t/session-not-getting-destroyed-on-logout/155354/6 "2008-12-11T05:38:22Z")

</div>

Maybe a before\_filter on the controller for your page that checks to see  
if the user is logged in, and if not, routes them to the login page?