Thank' Sri,
but my problem subsists !

In my page named "pageX" when i use the "quit" button , then in the 
perfom i "invalidate()" the session and then return mapping for the 
login page as describe below.

if (mapping.getPath().equals("/doQuit")) {
  HttpSession session = request.getSession(false);
  if (session != null) {
    session.invalidate();
   }
  return mapping.findForward("login");
}
Then my login page is displayed and my session id has changed.
At this time, i use the "BACK" button of my browser. The old "pageX" is 
displayed.
if i perfom an action in this page, then the action is realised with the 
old session id (whereas it should not be done !)

do you have an idea ?

thanks,

Marc
 

Sri Sankaran wrote:

>Session.invalidate() is one way.
>
>Sri
>
>-----Original Message-----
>From: Marc AMIR-TAHMASSEB [mailto:[EMAIL PROTECTED]] 
>Sent: Wednesday, October 16, 2002 3:26 AM
>To: [EMAIL PROTECTED]
>Subject: Ending a session
>
>
>Hi everybody,
>
>Is there a way to end a user session after a action ? Typically, i have in my page a 
>"Close" button that disply the login 
>form. But actualy if i use the "back" button of the browser, i come back 
>to the page where the "close" were. Then i can continue like if the 
>session wasn't closed...
>
>thank's
>
>  
>


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to