hi friends i have created a web application using netbeans 6.0
When a user loggs in the data is sent from Login page to a
servlet which in turn communicates with a bean. if the user id and password are valid the servlet creates a session and sets the attribute as follows
HttpSession session = request.getSession();
session.setAttribute("uname",uname);
And forwarding it to a new
jsp called Welcome.jsp . and on Welcome.jsp i am checkin the attribute value from session object.
Now on Welcome.jsp if i press back (on browser) my Login page is displayed. and then if i press forward button (on browser) the Welcome.jsp is displayed even if the user id and password is not entered. How do i handle the sessions?