I have been provided with the following code to make a page expire:

Code:
<%
Response.Expires = 60
Response.Expiresabsolute = Now() - 1
Response.AddHeader "pragma","no-cache"
Response.AddHeader "cache-control","private"
Response.CacheControl = "no-cache"
Response.CacheControl = "no-cache"
Response.AddHeader "Pragma", "no-cache"
Response.Expires = -1
%>


I have one file viewmessages.asp that does all the messaging operations, displayin the entire inbox, showing a particular message, deleting messaging the works..... It just doesn't compose messages.

So whenever a message is deleted, the form reloads the page, and "if" picks up the value in the queryString, deletes the messages and simply redirects the user to the same page.

So hence the reason why i don't necessarily want to always have the code on the page.
However, once the user clicks delete I want to ensure that the user cannot click Back and see the message.

And secondly, when the user clicks signout. They are sent to a page that deletes their current session details from the database and then redirected to the home page.

I want to ensure that no number of times the user presses Back, all those pages will now be expired!

And the user CANNOT end up back in their inbox.

You may use session variables, database table or both to manipulate the session information.