account sharing prevention

[Nam]

Not sure if this has already been discussed, I've an idea for membership site that user have to pay to get get access to forum content, and a hack that automatically ban a member if there are two logins using the same user names at the same time. If there is already one existed, please let me know.

[Andreas]

Impossible.
There can't be two "two logins using the same user name at the same time".
In fact, there can't even be 2 packets sent (or received) at the same time.

[Jolten]

You can check for duplicate IPs this seems to help a little. There is a hack for it here somewhere.

[Nadiar]

You can put a 'session' into the login cookie. Then anytime someone logs in, it generates a different session. If the Session, Password, and Username are not matching, it logs you out and deletes your cookie automatically.

You probably don't want to get into banning people for having 2 accounts logged in at the same time if they're paying for access, but its certainly possible to ban them if they login with a different IP within a certain amount of time from the last account use.

If you want to be more friendly, I would allow multiple logins as long as the IP's are in the same scope.

[Tekton]

Originally Posted by KirbyDE

Impossible.
There can't be two "two logins using the same user name at the same time".
In fact, there can't even be 2 packets sent (or received) at the same time.

Are you sure? Seems like that happens all the time on boards I've been to... is that a vB-forum specific rule?

[Nam]

Originally Posted by Nadiar

You probably don't want to get into banning people for having 2 accounts logged in at the same time if they're paying for access, but its certainly possible to ban them if they login with a different IP within a certain amount of time from the last account use.

If you want to be more friendly, I would allow multiple logins as long as the IP's are in the same scope.

That would be a great suggestion too, but can it be done? I'd have to research a bit about how much it cost for this.

If X person use user John to login, but then he share his user name John to another person Y. We can set a period of 2 hours, within this period, any different IP use the username John can't use the username, or better yet, the username John will be banned if vb detects there is second person.

I don't understand what KirbyDE mean by "impossible", I'm helping out my friend's vb and thus we both use the same logins all the time (I'm lazy to register a new username).

[Andreas]

Originally Posted by Tekton

Are you sure? Seems like that happens all the time on boards I've been to... is that a vB-forum specific rule?

No. Due to the fact that Ethernet uses packets (eg. serial communication) it is impossible that 2 users are using the same account at the same time.

[-t7-]

Originally Posted by KirbyDE

No. Due to the fact that Ethernet uses packets (eg. serial communication) it is impossible that 2 users are using the same account at the same time.

What are you talking about?

Your misinformation of "Ethernet" has NOTHING to do with how vB handles logins.

vB DOES allow 2 pc's to share the same account at the same time. This is because it does not check for sessions. Therefore the relevant data is routed to the correct pc.

[sub_ubi]

There was some progress made on this for VB2:

https://vborg.vbsupport.ru/showthread.php?t=22978

But never finished.

It IS possible because I've seen it done on certain sites, www.easynews.com for example. If you and a friend log on with the same account, the password is reset and an email is sent to the original account.

[why-not]

Hi

Why not just use the session, if another is created bump the old out! You can use IP tracking to, I know some use proxies, but there are not as many as there once were! On the forums I manage for my clients I do allow some proxies, legitimate ones, the others I kill at the server level. All of the forums I manage for my clients have a single user access rule in place! It is the best approach to take, this way when someone does something they and only they are accountable!

Sonia