How we Logout

The back button will always redirect you to previously visited page, But further forward redirection from that page will be restricted once session is abandoned.

Alternatively you can use JavaScript to remove previous history so that it will not go back and it will be disabled.

I have similar experience on the logout and yet not really out. The issue is not on session variable that has not set correctly but on the program logic error. It is very easy to write program like:

if session("seeUserLoginOK") <> "OK" then
error messaging...
end if

.... all other codse include html display

The correct way, and have to be do it in every program, is:

if session("seeUserLoginOk") <> "OK" then
error messaging....
else

.... all other codes include html display

end if

This is a simple error experienced traditional C programmer can easily fell into. It is also impoprtant in stop unwanted access as well.

rgds,
kfl.