If you are that concerned with this problem you could force every page to expire immediately, or in after reasonable length of time (minutes, seconds?). If the page is set to expire immediately, even when they hit the back button, the browser will re-request it, thus running your code that validates that they are logged in. Then you could display the message, or just kick them back to the login page.
Peter
------------------------------------------------------
Work smarter, not harder.
|