> How do people prevent the same user from logging into an application > with the same userid from multiple machines? We have users who are > sharing their IDs which is causing application failures with the > concurrent sessions.
There's an undocumented function you can use to check for existing values in the session scope. You can use this to run a comparison against a userid and see if they are currently logged in (or at least, have an active session, not necessarily the same thing). Do a search for "coldfusion.runtime.SessionTracker" for information on using this. The other option is to create your own flag that you can flip as users log in and out. You would then need to log a "last used" time and then create a scheduled task to clear out any users marked as logged in that have not been active for a certain amount of time, to deal with any that forget to manually log out. --- Mary Jo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Check out the new features and enhancements in the latest product release - download the "What's New PDF" now http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:294455 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
