Prevent concurrent login for same user account

[william9pm]

Hi,

I have code to expired/ destroyed the previous session when user login in the login page on vBulletin 3. This to prevent concurrent login for the same user account login at the same time.

But I couln't find the code on vBulleitin 4.0 and like to check is anyone know where is the code to create session upon login?

Thanks

[kh99]

I don't know about that mod, but I'm curious why you want to do that. What I find is... Edit: the following is wrong...see posts below.

that if I log in to one browser (without "remember me"), then I log in to another browser, I do get logged out from the first session (although a guest session will be created as soon as I try to access the site). If I use "remember me" for both logins, then it does seem to create two sessions, which surprised me because I would have guessed that it would delete the first session when the second was created. But even if it did, I'd still have the illusion that I had remained logged in because of the "remember me". So I don't see what removing the session would accomplish.

[william9pm]

Originally Posted by kh99

I don't know about that mod, but I'm curious why you want to do that. What I find is that if I log in to one browser (without "remember me"), then I log in to another browser, I do get logged out from the first session (although a guest session will be created as soon as I try to access the site). If I use "remember me" for both logins, then it does seem to create two sessions, which surprised me because I would have guessed that it would delete the first session when the second was created. But even if it did, I'd still have the illusion that I had remained logged in because of the "remember me". So I don't see what removing the session would accomplish.

Thank kh99.

Is the log out from the first session a default feature from vbulletin? Because it is not happen in my case. I'm using vBulletin 4.

[kh99]

Hmm...you know, I guess I made a mistake doing my testing. When I log in twice I *do* stay logged in, even if I don't choose "remember me". It's when I log out of one that I get logged out of both. I was pretty sure of what I was seeing yesterday, but now I can't reproduce it so I was either doing something different or imagining things.

In any case, I see now what you're trying to do. I played around a little and came up with this plugin, using hook global_shutdown:

PHP Code:

if ($vbulletin->userinfo['userid'] > 0 AND is_object($vbulletin->session) AND
$vbulletin->session->created AND !empty($vbulletin->session->vars['dbsessionhash']))
{
   $vbulletin->db->query_write("DELETE FROM " . TABLE_PREFIX . "session 
                            WHERE userid = " . $vbulletin->userinfo['userid'] . "
                            AND sessionhash != '" . $vbulletin->session->vars['dbsessionhash'] . "'"
                             );
} 


However, I've only tried it a couple times on my test system so I'm not sure it works in all situations.