I am working on an application.
The logout does not actually ensure termination of session.
for eg. after logout if back button is pressed the last viewed page is displayed and this can be viewed as a security threat.
Can any one give me a solution.
Thanks in advance!!
~Sumon

From this thread (http://saloon.javaranch.com/cgi-bin/...&f=50&t=012693), Scott Johnson provides the answer:

"Adding this code to your jsp will cause most browsers to not cache the response:

code:
--------------------------------------------------------------------------------
<%
response.setHeader("Pragma","no-cache"); // HTTP 1.0
response.setHeader("Cache-Control","no-store"); // HTTP 1.1
response.setDateHeader("Expires", 0);
%>
--------------------------------------------------------------------------------

See the spec (http://www.w3.org/Protocols/rfc2616/...4.html#sec14.9) for more info.

Jon Emerson
http://www.jonemerson.net/

Thanx a LOT Jon....:)

Can anyone please tell me why this happens??
I got a turnaround for this but its useer specific only!!
:(

Guys thanks for your co-operation!!

Sumon, it works because it tells the browser to not remember the pages it loads. Therefore when the user hits the back button, the browser needs to refresh the page in order to load it -- but it can't because the cookies are gone.

Jon Emerson
http://www.jonemerson.net/