hi all expertise
i already create a session what happen is that, when the user click the log out button it will redirect into log in page,(that was the corrent way)
but when the user click the back button they can access the web page without log in...
how to resolve this problem, i already use session.abandon() but this problem still occurs