logout the previous session for the same user

[Jats4U]

Hello,

I want my web application user to login as many times as he wants but on every successive login, the application should automatically take care of logging out the previuos session for that user.

My web application will be used by multiple users at a single point of time..so the solution should take care of the performance issue as well..

Please let me know if you any clue as on how to achieve this.


Thanks,
Jatin

[joedeene]

Hello,

I want my web application user to login as many times as he wants but on every successive login, the application should automatically take care of logging out the previuos session for that user.

My web application will be used by multiple users at a single point of time..so the solution should take care of the performance issue as well..

Please let me know if you any clue as on how to achieve this.


Thanks,
Jatin

uhm, you have not said what language you are doing this with, like Visual Web or VB.net or C# its probably asp.net, and also we do not do homework assignments for other users, please read the Posting Guidelines for a full list of guidelines to posting. but i, and other members/experts, here would be more than welcome to assist you with specific coding problems.

joedeene

[deric]

There may be other ways to solve this... but this is just my idea: create or use another flag (a field in your user's datatable) to check if it is the same user (with the same login details) who is logged-in or not. It's up to you what data are you going to set for that flag, it could be the IP address, a random number or anything...

[Jats4U]

The programming language I am using is C#.

Setting a flag in the d-base is one solution but it won't be a good option performance wise because the application will hit the d-base on every user action to check if the session -id / ip address has changed. If so, then do not allow the user to perform any action and log him out.

Please suggest if you have any other option

Thanks & Regards,
Jatinder

[deric]

There's no other way to check if another user logs in with the same login details on another computer without going through the server. It's a drawback, though, but that's logically the way to go. Performance will be compromised to achieve that requirement because we can't do magic anymore. You just need to design it in a way that it will still perform efficiently.

Another option would be to not allow the same user to login in another computer if he's currently active somewhere.