Re: [phplib] Preventing Multiple Login From: Donncha O Caoimh (donncha.ocaoimh <email protected>)
Date: 08/21/00

I developed a system using a session ID that was stored in the user
records of those logged in. The session ID was also sent to the person
in a cookie. Every request to the server sent the session ID as well,
and the server verified that the session ID matched. In this instance,
the last person to login would be the only one allowed access to the
server.
No problem with timeouts or anything and works very well!

Donncha.

Bryan McGuire wrote:
>
> If you were using HTTP authorization, you could simply look at your
> access logs and easily see who's using a compromised password and even
[snip]
> Any ideas on preventing multiple login using the same username passwd?
>
> Will putting UID is active sessions table help?
>
> How do I prevent the user from being locked out if the user does not
> press
> the logout link explicitly and the session has not yet timed out?

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>