This is peculiar.
I have a test system at home for beta-testing sites before production. It runs a Windows XP Pro with Apache 1.3.22, PHP 4.1.1 and MySQL 3.something or other. I don't think that's really relevant.
On the production server we have a Linux/apache/php/mysql -combo, with near-identical version numbers.
The peculiarity is that when I run my user login scripts on the local site, they work just as intended - after the user logs off, if back is pressed it notifies that the user has, in fact, logged off, and therefore the data can't be displayed.
When I run the exact same code on the linux system, pressing back displays the user information regardless of the logoff.
I suppose this might be an apache thing, but since I have no idea where to start seeking, I'll just bother you guys =)