[bob23]

I hope you can help me solve a tricky problem. I have a basic login script that i use to secure a website for members only. To solve the problem of individuals sharing password to access the service i am trying to come up with a php (perhaps using mysql too) script to prevent other individuals accessing the service from another computer if the account is already being used by another user ie. one user logged in at a time with an individual username and password

I hope you can all help, as i am now tearing my hair out

regards

bob

[<?Wille?>]

sounds prittey trickey.. you could make a new column to your users table that updates to ex 2 when they log in and to 1 when log out.. a online/offline checker. and then check users status in login
something like:

PHP Code:

$dbPwd = // form db

$pwd = $_POST['pwd']; // from login form

$UserStatus = //from db



if ($dbPwd == $pwd && $UserStatus == 1) {

     // go to protected page

} else {

     // user is already online 

storeing last login date and time would probably also be a good thing.. this one works AS LONG as your members click the logout link when they are finished.. if they close the browser or leave the site without logging out that username will not be accessable becourse it will say users already online.. so i would say you think about some kind of date time thing.. if they are online but last login was 2days ago.. then let users pass or something..

hope i helped
Wille

[satay]

hello
But how we update the user status at the time of logout.Please tell me.

[Jcbones]

I would assume that you could just use an UPDATE query.

PHP Code:

if($_GET['cmd'] == 'logout')
   {
     $query = "UPDATE `user` SET `userStatus`='0' WHERE `id`='$userID'";
          if(mysql_query($query)) echo 'You have been logged out!';
   } 

[wirehopper]

Don't forget that many users never log out - they just close their browser or shutdown the computer.

You would need a cron job to indicate that a user has logged out after the session times out.