[akshits]

Hello,

Disabling the back button is 101% unrealistic. A long way to do so is:-

1> Your logout link must be like:-

<a href="logout.jsp" target="_new" onclick="location.replace('browserClose.php');">Logout</a>

Will open a new tab in Mozilla and a new window in IE. On click the open window will goto "browserClose.php"

Other way is using the following on each page to prevent page caching:-

<META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">
<META HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE">
<META NAME="ROBOTS" CONTENT="NONE"> 
<META NAME="GOOGLEBOT" CONTENT="NOARCHIVE">

-or-

<?php

function setExpires($expires) {  
 header(  
   'Expires: '.gmdate('D, d M Y H:i:s', time()+$expires).'GMT');  
}  
setExpires(timing needed);  
?>

Regards