Once the user logs in, they are brought to different page. When they click on the browser back button to go back to the login page, how do I force them to logout?

I used Session.Abandon on the login page but that didn't stop it from going to the other page when I click forward even though no password was entered. How do I avoid this?

Also, when pressing refresh, I do I get rid of the post variables to get a completely refreshed page. Thanks a bunch!

Hi,
Verify in the login page if the user is already hold an active session then redirect him/her to the default page the code for this should be like this:

protected void Page_Load(object sender, EventArgs e)
{
Response.Expires = 0;
Response.AddHeader("pragma", "no-cache";
Response.AddHeader("cache-content", "private";
Response.CacheControl = "no-cache";
if (Session["AuthenticatedUser"] != null)
{
Response.Redirect("default.aspx";
}

...
}

sourabh jain