Problem with browser back button

[eluser]Iciclefeet[/eluser]
Your function that accept the post should set the session. And the user Page should check to see if the session is set before showing the views.
Then all you haft to do is enable add CSRF in your firm to prevent resending of post data. You can do this manually or by using form_open() ; and enabling CSRF in the configuration file.