Authentication via sessions

[jaddy]

Hi,

I've built up authentication in my project using sessions, but when I logout, then click back, I can view the restricted pages although I should be forwarded to the login page.

This is happening until I do refresh in my browser!!

Is this considered a security hole?

Thx.

[scoppc]

I guess that happens becoz of browser cache.
Security hole, I dont really think it so... coz people can just see what's in there (well, if it contains very important info, then it is a threat...), when they try to do something, for instance, add a new database record, they will see the login page.