Problem in how to stop displaying previous page after Logout

Question

<%
// I invalidate all my session when i logout and comes on Login.jsp page but if i go back still it open
previous pages
How i can stop these
i am adding these line in avery jsp page
1)
response.setHeader("pragma","no-cache");
response.setHeader("Cache-Control","no-cache");
response.setHeader("Cache-Control","no-store");
response.addDateHeader("Expires", 0);
response.setDateHeader("max-age", 0);
response.setIntHeader ("Expires", -1); //prevents caching at the proxy server
response.addHeader("cache-Control", "private"); //IE5.x only;
%>
2) and in Logout.jsp
response.sendRedirect("Login.jsp");
session.invalidate();
session.removeAttribute("viv");
still on reaching login page i can move to previous page by clicking back button

Answer 1

Hi sreenathreddy.
I am doing exactly what you are talking about.
On load of each jsp page, I check to see if I am still in session. If i am not, i redirect the user to the login page saying his session has expired.. This works perfectly fine in the sense that after I log out, if I directly type in the url or click on any other link from history, it redirects you to the login page.
But my problem sitll remained that after logging out, if i clicked the back button, it would still take me to the previous page even though none of the links on that page would work.
So i added all the response.SetHeaders that are mentioned in this discussion.
Now the scenario is such that, when i press the back button after logging out, it tells me that the page has expired and i have to resubmit the form.
There are two problems with this
1. at this point , if i refresh my page, it still gets the details from the server and even though i am invalidating the session and all the user details, and checking to see if the session is invalidated,it still somehow manages to get all the details(i dont know where that info is stored)
2. even if the person has not logged out. ie in the middle of a perfectly valid session and clicks on the back button, he is warned that the session has expired.
please do reply
thanks
ritesh