> I would like to find a way to prevent users from simultaniously
> logging in from different computers but using the same username and
> password.

How do you define "different computers"?

A remote IP address, possibly  cookies, and possibly JavaScript
are about all you have to work with to determine "different
computers" which could be any of the following scenarios:

Are two browsers (e.g. FireFox and IE) considered "different
computers"?  What about two users of terminal-services on the
same OS?  How about if they have two OSes running in separate VMs
on the same hardware?  Or if they're two computers behind the
same NAT/router returning the same IP address?

Or what should happen if they're behind a load-balancing proxy
that can return multiple outward facing IP addresses for the same
computer?  Is each IP address a different computer?  Or their
dialup hangs up on them and when they call back they get a new IP
address...or a cellular data service where their IP changes as
they move from cell to cell?

If you base your decision based on the cookie/token, what happens
if their machine crashes?   Do they have to wait for some
arbitrary timeout before the app will let them back in?

It might be possible to have some AJAXy polling portion that
pings your server every N seconds to update a "hey, this user is
still not dead" timestamp, but it creates a lot of traffic/noise
and isn't guaranteed in the event that they disable JavaScript
(or active-x on Win32)

It's a complicated issue, and anything close to a solution
requires a tighter definition of the business-rules driving the
prescription...if it's even a "solvable" problem...

-tkc




--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to