---- Thomas Chang <[EMAIL PROTECTED]> schrieb: > In my web-app, after I logout I can even access the page by clciking the > back-button in the browser tool bar. Now I want to caoture this action so I > can check if the session is valid or not redirect it.
This might be happening *just* within your browser, without any requests going to the server. If that is the case, then there is nothing you can do on the *server* to catch this. If the browser is actually fetching the previous page from the server, then you have something incorrectly configured in your servlet container security settings, as that should not be possible. Regards, Simon

