Prevent multiple users logging in on 1 account...

Anyone know the best way to prevent someone 'sharing' their login details so that others can use their account at the same time?

At the moment, it seems multiple logins can be made on a single account.

Annoying when accounts are paid membership then 'shared' on forums...

 

 

Is there a setting for this somewhere?

Quote · 15 Nov 2010

Nope.

Dolphin tracks if a member is logged in or out by reading a browser cookie. No additional checks are done, so preventing this cannot be done without code modifications.

https://www.deanbassett.com
Quote · 15 Nov 2010

Thats not so good. Kinda makes some of the paid services a little easy to get round...

Any idea on what needs to be done?

Quote · 15 Nov 2010

 

Sounds like you need a login log for EACH member.  Example….

 

Patrick81's Login Log

Date Time IP Address
11/15/2005 11:35AM 209.67.38.99
11/15/2005 10:23AM 209.67.38.99
11/14/2005 2:43PM 209.67.38.99
11/12/2005 7:54PM 209.67.38.99
11/12/2005 10:40PM 209.67.38.99
11/11/20 11:02PM 209.67.38.99
11/10/2005 1:35AM 209.67.38.99

 

What you see above seems good but if you see something like below, it's obvious.

 

Patrick81's Login Log

Date Time IP            Address

Date Time IP Address
11/15/2005 11:35AM 209.67.38.99
11/15/2005 10:23AM 204.178.112.170
11/14/2005 2:43PM 209.67.38.99
11/12/2005 7:54PM 216.52.13.33
11/12/2005 10:40PM 29.64.8.105
11/11/20 11:02PM 64.6.23.99
11/10/2005 1:35AM 216.52.13.39

 

To make something like this would help all of us know who are messing around with their accounts. Anton made a great mod, Access Management System 2.0.0 but it doesn't include something like this. :(  Maybe he will if he understands this.

 

EDIT: Sorry, the tables aren't pretty but i hope you get what i'm saying.

Quote · 15 Nov 2010

yes, that shows the IP log, whats needed though is a default setting in Dolphin so that a user account can only be logged in with 1 IP address at a time.

 

Some sites have this, facebook for example. If I log in on one pc, then log in to my account on another from a different IP, the last one to refresh is logged out.

 

This would prevent people from distributing their log in details for example if the site had a PPV section of premium section...

 

Quote · 15 Nov 2010

I don't think that's a good idea.  Let's say someone stole your acccount and that person would NEVER log out.  How will you get in? How will Admin know who's the REAL member's ip address? Maybe dolphin should keep all the registered IP addresses so you can compare. Something like that. I dunno

 

yes, that shows the IP log, whats needed though is a default setting in Dolphin so that a user account can only be logged in with 1 IP address at a time.

 

Some sites have this, facebook for example. If I log in on one pc, then log in to my account on another from a different IP, the last one to refresh is logged out.

 

This would prevent people from distributing their log in details for example if the site had a PPV section of premium section...

 

 

Quote · 15 Nov 2010

so long as your admin password is safe. Should also be a time out on the log in so that wouldnt happen. Plus notify email address for changing the admin password...

 

Im thinking more for normal user accounts. There must be a way to prevent more than one IP being logged into one account at the same time.

Im looking at covering some PPV events on my site, sports related. It's very common on forums for people to pay for access to a PPV stream, then share the log in details on a forum.

Quote · 16 Nov 2010
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.