Apparently Logout doesn't seem to work in my Application

[Arun Giridharan]

Hello ,

I am building a small app , whenever i click on logout i get into the first page and when try to click on back button of the browser it can navigate to my previous state that is really bad , i did bit modification in my SessionFilter class

httpServletResponse.setHeader("Cache-Control","no-store, must-revalidate");// HTTP 1.1.
httpServletResponse.setDateHeader("Expires", 0);//prevents caching at the proxy server

but it seems that , i'm getting the same old behavior.

this is my logout code

if (request.getServletPath().equals("/logout.do")) {
			request.getSession(false).invalidate();
			for(int i =0;i<request.getCookies().length;i++){
				if (request.getCookies()[i].getName().equals("JSESSIONID")){
					request.getCookies()[i].setMaxAge(0);
					break;
				}
			}
			response.sendRedirect("./");
		} 

[Rob Spoor]

If you need to invalidate the session, just call invalidate() on the HttpSession object. To invalidate a regular cookie, set the max age to a negative value (not 0).