I built a JSP inventory, but Im running into a problem with the sessions when I log out.
I used session.invalidate(); to terminate my session, but if I hit the back button on my browser it will return me to the inventory page.
Now if I just simply click any link, it will throw me back out to login (which is what its supposed to do when Im not logged in), but if I refresh the inventory page, it refreshes the session and allows me to do anything I want, just as if I had never logged out.
How can I get around this??? I tried messing with the session-timeout value in my Web.xml, but to no avail. Is there a way I can simply clear the history of the browser once I log off??