I am developing a small email web application in JSP/Javascript/html. It has a logout开发者_开发百科 link which when clicked redirects to login but the back button still takes the user to his account and therby can access his account again. I am deleting all session variables once the logout is clicked
Check the cache header you pass to the client browser..
精彩评论