Mark, If you use session vars, simply set a session var with a value of UID:PWD. Exampe: SESSION.Tracker = mark:12345
Then, upon login, validate against this. If you have a session var that has the value "mark:12345", then kick them out to a message that tells them that the user is already logged in. Dave ----- Original Message ----- From: "Mark Leder" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, October 14, 2002 1:30 PM Subject: Duplicate UserNames / Passwords logging into a site Hi All, I need some ideas on the best approach to the following: I have a subscription based site, where everyone has their own user name and password (I keep duplicates from being entered in the database). However, the problem is with sharing of usernames and passwords. Say for example I log in as UID = "mark" and PWD = "12345", while I'm in using the site, someone else can use this same user name and password to log in and use the site illegally. The ideal situation would be if I were logged in, then a second person tries to use my UID and PWD, the second person is denied access, and the first person is booted out and given a warning screen that they account may be deactivated because of abuse. I use session management on this site, but have not implemented cookies. What would be a good way to accomplish this? Thanks, Mark ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com
