Multiple simultaneous log-ins

[Morley]

Discovered a user/password combination is accepted even though the same combination is being used from a second machine. One user on multiple machines simultaneously. Can this be blocked?

[Harjo]

Why would you block that? I find it a very nice feature. I have mostly open 2 sessions of ouer solutions, 1 for CRM and the other for my hour registrations. but you can block this by some code:

use the new function: addCLientinfo. This info is set also in de admin-pages. After that you can do a count for a specific client info. if count >= 1 -> block!

(I am talking if you use your own security, not the buildin one from Servoy)

[Harjo]

yes, we use the addClientInfo for that.

for every customers that logs we do something like this: (raw code)

Code: Select all

//Add additional info to a client which can be viewed in the admin page
application.addClientInfo(companyname);
   
//check or set total usercount per company
//Get a count for all clients having the same additional info line
var count = application.getClientCountForInfo(companyname);


I think you get the idea how to solve this.

[Harjo]

He Westy, you deleted your post just before I answered!

guess you found the solution?

[Westy]

Oops, sorry to have pulled the question out from under you. Here it is again for those who do not mind reading in reverse order.

We are hosting a solution and want to charge per user. Each user logs on with their email address and password (not using Servoy security). We see that a user will sometimes open more than one session at a time, which is okay as long as they are on one computer.

We have been trying to figure out how to stop multiple users from using the same email address and password from different computers to access the solution. Does anyone have any ideas on how we can achieve this?

Actually, I thought I had a solution and that is why I pulled the question, however, now I am not so sure that I have a good solution.

What I would really like is to have the ability to kill a session based on the user login. For example, when the user logs in we would check to see if the user already has a session going (based on email address and computer ip address). If he, or someone else using his email address, is already logged in we would like to automatically kill the first session and let him come in as a new session. Is there a way to kill an existing session, similar to doing it from the Servoy Admin page, except with a method at the time of login?

[Harjo]

No there is'nt

the only reliable way to count if customers are logged in more than once is the way I described above.

[Westy]

But if they are logged in more than once, what do you do? If the user closed the solution without hitting an exit button their session could be running for another 30 minutes. Once they are out of the solution, they no longer have the ability to go back and kill their own session (like we can). I am speaking from the perspective of a hosted webclient solution.

[Harjo]

ah indeed, you are talking about the webclient! I was talking about the smartclient!

I think there is no solution for that, right now.

[LOGIsoft]

Hello everyone,

On a related note, is there a way to get the extra Client Info to show up in the server local host access logs? That would be very useful to analyze the connections actually used by a particular client historically, and eventually for billing purposes.

TIA,

Ben