Problem on "Session Handling"

Question

Hi everyone,I write a simple servlet program on Session handling.In this I use invalidate() method to invalidate the session.
invalidate() But the problem is that when i push the back button the session data gets back,means in the previous page session data gets visible.please help me.

Answer 1

All what you can do is to instruct the client not to cache the page. You can do this by adding the following entries to the HTML head:
<meta http-equiv="cache-control" content="max-age=0, must-revalidate, no-cache, no-store, private">
<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="expires" content="-1">If you want to do this programmatically on HttpServletResponse (using a Filter or so):
response.setHeader("cache-control", "max-age=0, must-revalidate, no-cache, no-store, private"); // HTTP 1.1
response.setHeader("pragma", "no-cache"); // HTTP 1.0
response.setDateHeader("expires", -1); // ProxyMake sure that you clears your browser cache before testing.