Terminating Sessions.. Help Please...

Question

Hi i am having problem terminating a session when the user logs out,
My session is created as follows
HttpSession session = request.getSession();
String username = (String)session.getAttribute("username");
if (session.isNew())
session.invalidate();
response.sendRedirect("http://localhost/login.html");
       if (username != null)      
out.println("<LI>Welcome  " + username +"<br>");
out.println("<LI>Click <A  HREF= 'Hello'>Here</A> to log out<BR><BR>");
}The user can click on the log out bottom that redirects them to another servlet page that's "Supposed" to kill the session, after a short stop the user id redirected to the Login page
if (!session.isNew())                                            //if  asession exists
      session.invalidate();                                           //Kill session
             response.sendRedirect("http://localhost/AdminLogin.html");       
          //Redirect user to login page
                    }The problem is when i click on the back button on the browser it allows me back into the site where im still logged on. This is causing me some problems can anyone see why this is happening?
Any Help is much appreciated.
Has anybody got an idea as to why this is happening im out of ideas
Message was edited by:
Square

Answer 1

That page is comming from the cache. Notfrom the server itself.
You should be able to avoid this by setting the cache-control header to no-cache in all your responces.
Normally the servelets, jsp should not allow the responces to be cached becouse of this problem