> I implemented login/logout area using sessions. Its working fine. When the
> user logs out, I destroy the session. So, if he clicks on any link, it
> will ask him to login again. But I'm still able to browse through the site
> using back and forward button in the browser. Can anyone tell me how to
> avoid this?

You'll need to send the HTML headers to let the browser know to not cache the
pages.  I'm not absolutely sure, but I think that these should do it:

  header('Expires: 0');
  header('Cache-Control: must-revalidate, post-check=0, pre-check=0');


Take care,

Nik