Disallowing concurrent login using the same user account
From: Zeng (zzy_at_nonospam.com)
Date: 08/25/04
- Next message: Shawn Farkas: "Re: code access security with URL condition"
- Previous message: Sankar Nemani: "Re: code access security with URL condition"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 25 Aug 2004 10:21:56 -0700
I would like to prevent someone sharing a login in my .net app but I know
that it would
know that would be difficult so it would be acceptable to prevent concurrent
logins. So here is my current plan, each time a user logins we will create
a unique id (a guid for example) and store it both in the cookie and in our
server for the login name. Our server will check for matching of that id for
each subsequent access (read, write data etc), if it is not matched, then we
will automatically log the user out. So if 2 people are using the same
login name, the 2nd person logging in will kick the 1st one out. Does
anybody
see any problem/hole with that approach?
Thank you very much advance for you help!
- Next message: Shawn Farkas: "Re: code access security with URL condition"
- Previous message: Sankar Nemani: "Re: code access security with URL condition"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
