sorry How u can detect they are pressing the back button. for me i have use the verify sessionid develop by my self to check the valid id, so it will redirect them to the login page again, but only happen is the page has refreshes from the cgi script.