session management

[Kendel]

I need to setup a session object. After 10 min without any activity, it will clear the session and redirect user to login page. Can someone help me please?

What if user use the back button? What is the best way to handle this? I don't want to disable the back button because it's annoying.

Many Thanks.

 

[prosper]

Every page of your website has piece of code checking for if there is session, you can write piece of code in a library.jsp file and include it.
You can use setMaxInactiveInterval(600) for user session after user has submitted a page with valid login name and correct password.