Our client has pointed out to us recently that after a user clicks logout, they can still click the back button and see pages and information. This is true. If the user attempted to click on a link or refresh the page THEN, because they are logged out, they would be redirected to the login page.
Is there a way to prevent this behavior? I don't want to block the back button. I can't think of a way that will stop a page from showing when they are logged out but simply click the back button. I have noticed however, that with my online bank account, if i click logout and then the back button it takes me straight to a login page.