Prevent concurrent logins

Question

4.00/5 (1 vote)

See more:

Hi Experts,
I have developed
one web application which can contain many users.
I just want to prevent multi ple login in web application in terms of like -
1. If
User1 is logged In, form another browser or another machine the
User1 can
not login untill previous login has been distroyed.
2. If User1
Logged Out from Browser "a" or Machine "a", from another machine or
;
browser User1 can login.
3. If Browser closed with Logout, User1 can login again from same browser or
different
browser or machine.
4. And The most important
point is, Suppose Application, Machine Or b
rowser

close unexpectedly , The into system.

Can u Help me? Thanks in advance.

Posted 15-May-13 2:48am

kvns2608

Updated 15-May-13 2:49am

v2

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Mohammed Hameed · Accepted Answer · 2013-05-15T02:56:00

You have to implement this by using Session events in Global.asax file and also you need to write some javascript code to check whether the browser has been closed directly without logout.

But doing all these stuff also cannot achieve fully to restrict multiple logins because in some cases in some cases it might fail and user wont be able to login.

There is a good explanation in the below links, I recommend you to go thru them:

http://forums.asp.net/t/1144906.aspx[^]

http://www.dotnetfunda.com/articles/article1083-restricting-user-to-login-multiple-times-using-same-credentials.aspx[^]

Hope it helps!!!

Prasad_Kulkarni · Accepted Answer · 2013-05-15T03:18:00

In order to track user login another way out is handle the Session_Start and Session_End event in Global.asax.

You can get the session id when user successfully logged in, just store the session id in your datastore(associate with username).
Delete the session id when Session_End event fires or user manually logout.

If user try to login with the same username from other machine, verify the session id against database. Hope it helps.

It's more reliable than the MemberShip approach, but not perfect since HTTP is a disconnected, stateless protocol.

Prevent concurrent logins

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0