Session Help

I would like to know why....why...why?

I have an app, with a login and password verification entry that I am working on. The rest of the app should be secure.

Upon login verification, I set the session attribute login to hold some pertinent information. Then on each page, I check for the session attribute login and do some comparison to ensure only logged in people can get the page. Upon logout, the session is invalidated.....WORKS LIKE A HOT ****

BUT, if I colse the browser without logging out, then reopen the browser and request a page directly, I get it....

What can I do to solve this issue of security?

[660 byte] By [wmacey] at [2007-9-26 1:34:16]