The problem you will face is that often when users click the back button, the page is not reloaded from the server but from their cached copy. So basically, you'll have to use client side scripting to make this happen.
When you generate a page you will have to create a unique token which is used only once. Then have a JavaScript function which runs on page load create an Iframe and load a url in that frame. That URL would take in a parameter (the unique token) which is only usable once. When the server processes the URL, if the token hasn't been used the it returns an OK message and writes off the token has used. If the token has already been used it returns an error message which triggers a function that sends the user to the login page. Obviously, you will have to add this to every generated page within your app. -- Marc Campeau ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.houseoffusion.com/banners/view.cfm?bannerid=11 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:182510 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54