Login/Logout Problem

I used a HTML page to accept username and password. The params are accepted by a servlet that checks them. If accepted, it redirects to servlet Home otherwise redirects to an errorpage.

On successful login the values are put in session so that it can be displayed in all other pages.

Now, the problem part. When logout is clicked, the user should logout ... i used session.invalidate() to do this.... and then redirect to login page again.......but if i click the Back button in browser. . . it works as usual

Please suggest something

Hi Arshad,

welcome to Java Ranch

your session is already invalidated. But when you click on back it shows last page you access, means at that page you are not check for session. So make always check for session, if session available or not. If session available process for further otherwise redirect to login page.

Thanks for prompt reply....

is that any method to clear history... so that the "back" button doesn't work at all ?

Read below link..

Clear History If User Click Back Button

This topic already discuss with Java ranch...

Refer this
webpage

I used the following code.... username and password are both checked to be admin/admin

import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;

public class Login extends HttpServlet {
	  public void doGet(HttpServletRequest request,
                    HttpServletResponse response)
      throws ServletException, IOException
    {
   
          HttpSession session=request.getSession(true);
    String uname = request.getParameter("name");
    String pass = request.getParameter("password");

if (uname.equals("admin") && pass.equals("admin"))
      {
          session.setAttribute("name", uname) ;
          session.setAttribute("password", pass) ;
          response.sendRedirect(response.encodeRedirectURL("Home"));
      }
      else
      {
          PrintWriter out = response.getWriter();
          out.println("<html>");
          out.println("<head>");
          out.println("<title>Invalid User</title>
          out.println("<body bgcolor=\"#B93B8F\" style=\"h1{letter-spacing:5}\" text=\"yellow\">");
          out.println("<h1 align=\"center\">Access Denied!!</h1>");
          out.println("<br><br><hr><marquee> NOT a valid Administrator Login (admin/admin)</marquee>");
          out.println("<hr><br>");
          out.println("<h2>Click <a href=\"Login\">here</a> to try again!</a></h2>");
          out.println("</body>");
          out.println("</html>");
      }
   }
     
}

Please correct me where i get wrong

"Arshad Cs", please check your private messages for an important administrative matter.