user session management issue
-
hello, If i want that if some body have logged in on my portal with his user name and pwd.and at same time same user tries to logged in from different computer with his user name and pwd then system should tell him that "you are already logged in with this user name and pwd." how can i achieve this in asp.net c# application. thanks in advance. Regards Amit
Amit Agarwal
-
hello, If i want that if some body have logged in on my portal with his user name and pwd.and at same time same user tries to logged in from different computer with his user name and pwd then system should tell him that "you are already logged in with this user name and pwd." how can i achieve this in asp.net c# application. thanks in advance. Regards Amit
Amit Agarwal
This is most frequently asked question. There is a search box on the right top corner. You will find plenty of answers if you use that. To answer the question, you need keep a flag in the database which will be set when user logs in and unset when logs out. When a user logs in, check the status of this flag and if it is set, say that user has logged already. This method is not fully foolproof. A common problem of this approach is your flag will not reset if user closes the browser without logging out. Hooking JS method on window close and doing AJAX request to reset the flag is one possible option. But since JS can be turned off at the client side, this method is not reliable. A better approach is to record the last activity time of the user and a database job resets the flag if current time - last activity time is greater than session expiry limit. A combination of all these methods will work well.
Best wishes, Navaneeth
-
This is most frequently asked question. There is a search box on the right top corner. You will find plenty of answers if you use that. To answer the question, you need keep a flag in the database which will be set when user logs in and unset when logs out. When a user logs in, check the status of this flag and if it is set, say that user has logged already. This method is not fully foolproof. A common problem of this approach is your flag will not reset if user closes the browser without logging out. Hooking JS method on window close and doing AJAX request to reset the flag is one possible option. But since JS can be turned off at the client side, this method is not reliable. A better approach is to record the last activity time of the user and a database job resets the flag if current time - last activity time is greater than session expiry limit. A combination of all these methods will work well.
Best wishes, Navaneeth
thank you so much for the very nice and approchable answer. i got two of your answers. but "A better approach is to record the last activity time of the user and a database job resets the flag if current time - last activity time is greater than session expiry limit." can you please little Elaborate this approach.how to record the users last activity time. and in the search box what will the correct keywords to find out the answer. Thanks
Amit Agarwal
-
thank you so much for the very nice and approchable answer. i got two of your answers. but "A better approach is to record the last activity time of the user and a database job resets the flag if current time - last activity time is greater than session expiry limit." can you please little Elaborate this approach.how to record the users last activity time. and in the search box what will the correct keywords to find out the answer. Thanks
Amit Agarwal
Amit Agarrwal wrote:
how to record the users last activity time
Whenever there's a postback (ie: the user submits a form etc, clicks a button, whatever), simply call a function that updates a field in your user table with the current date/time.
I don't have ADHD, I have ADOS... Attention Deficit oooh SHINY!! Booger Mobile (n) - A bright green 1964 Ford Falcon - our entry into the Camp Quality esCarpade!! Do something wonderful - make a donation to Camp Quality today!!
-
thank you so much for the very nice and approchable answer. i got two of your answers. but "A better approach is to record the last activity time of the user and a database job resets the flag if current time - last activity time is greater than session expiry limit." can you please little Elaborate this approach.how to record the users last activity time. and in the search box what will the correct keywords to find out the answer. Thanks
Amit Agarwal
I meant exactly what Damian said. This will allow you to identify how long a user is inactive and reset the flag if he is inactive for long time.
Best wishes, Navaneeth