Be carefule that session_start() will add the followin HTTP header. -------------------------------------------------------------------------------- Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 -------------------------------------------------------------------------------- To prevent it, you need to call session_cache_limiter("public") before calling session_start() -------------------------------------------------------------------------------- session_cache_limiter("public"); session_start(); -------------------------------------------------------------------------------- There are 4 valuse you can use for session_cache_limiter() public private_no_expire private nocache Since we are sending a same static HTML to everybody, we should use "public"