RE: [coldbox:18274] [ColdBox 3.5.0] Prevent concurrent user login

Communities ColdBox HMVC
#1

Store the session ID in your user table after the user logs in. Every request, check the session Id in memory to the one in the table. If it’s different, force a log out.

Thanks!

~Brad

ColdBox Platform Evangelist
Ortus Solutions, Corp

E-mail: brad@coldbox.org
ColdBox Platform: http://www.coldbox.org
Blog: http://www.codersrevolution.com

#2

Many thanks. This seems a good solution. But is there another way to solve without check every single request?

#3

You can do it however often you want, up to a max of each request. But why would you want to do it less than each request? Either you’re okay with multiple logins or you’re not.