hello
its allmost impossible to disble the back button ( only in pop ups with out navigation bar, and dissable right button click)
but if you use in each password protected page
<%
If Session("username") = "" then
Response.Redirect("notallow.asp")
End If
%>
or
<%
If request.cookies("username") = "" then
Response.Redirect("notallow.asp")
End If
%>
this could be ok.
maybe user can go back but they can't do anything
saludos