please help me to solve the problem in jsp for session

i am having trouble .... when i signing out the web page.. it displays " successfully signed out " .. if i tried to go back ... it wont go .. how can i do that ?
[168 byte] By [kannankallia] at [2007-11-27 4:40:25]
# 1
After you invalidate your session, how will it go back? You have to login again. Did I understand wrongly?
skp71a at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 2
How is that a problem? It looks like it's doing what it's supposed to :D
nogoodatcodinga at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 3
yes .. you understood wrongly ... after signing out .. i can visit the previously viewed pages ... what i need it .. i can't view that pages ...give a sample code of it...
kannankallia at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 4
How are you currently trying to block that then?
BalusCa at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 5
no problem if i see previous page.. again i go back .. i see the another one .. if i am doing like this .. i end up in login page ...
kannankallia at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 6
How are you currently trying to block that then?
BalusCa at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 7
hey....after logout you can use javascript:window.location.href="somepage"...redirect to signout page... if user tries to go back..it WON"T... i did like this for few projects...it works me.... let me know if u need more explanation
loguKKa at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 8

Clientside stuff is easy to hack. Letting them to handle server-related security stuff is certainly bad practice.

And now I guess that kannankalli just want to prevent others from accessing restricted pages. But he actually has implemented completely nothing to accomplish that and was expecting of some magic. Is that true, kannankalli? Or did you actually have implemented kind of a Filter to block that? If so, then please elaborate the detailed problem with the filter. If not, first implement it yourself, then we'll see further. Or if you don't know how to implement it, then please ask specific questions. You're the developer here, not us.

BalusCa at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 9
Remove the cache of that page..For that change the header to<meta http-equiv="cache-control" content="no-cache"><meta http-equiv="expires" content="-1">regards
arundevja at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 10
In logout JSP call session.invalidate() method. and check wheather session is valid or not in entire application(using filter). In that case u can maintain session in application.
niraj.tha at 2007-7-12 9:51:34 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...