From a01482b61a31ed217c7aacd03d84d63265a34deb Mon Sep 17 00:00:00 2001
From: Neil Blakey-Milner <nbm@knowledgetree.com>
Date: Fri, 27 Jan 2006 12:26:17 +0000
Subject: [PATCH] Manually control cacheability outside of the session management to avoid treading on divergent behaviour in various different Internet Explorer versions.

---
 lib/session/Session.inc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/session/Session.inc b/lib/session/Session.inc
index 3de60a0..1d73a2d 100644
--- a/lib/session/Session.inc
+++ b/lib/session/Session.inc
@@ -109,8 +109,10 @@ class Session {
     function verify($bDownload = false) {
         global $default, $lang_sesstimeout, $lang_sessinuse, $lang_err_sess_notvalid;
         // this is a workaround for an SSL download bug with IE.
-        session_cache_limiter('private');
+        session_cache_limiter('none');
         session_start();
+        header("Cache-Control: must-revalidate");
+        header("Expires: " . gmdate("D, d M Y H:i:s", time() - 3600) . " GMT");
         $sessionID = session_id();
         if (strlen($sessionID) > 0) {
             // initialise return status
--
libgit2 0.21.4