I was about to write a mile-long story on how my problem occurs, but instead I'll try and phrase my request carefully =)
How do I stop people from using the 'reload' button in order to gain access to a resource where username and password are required?
I've written a user-info page in PHP using a whole lot of include files to keep my code tidier, and sessions to transfer the different variables accordingly (the structure of the system is such that in any and all cases what happens when submit is pressed is a re-load of the same file).