Handling multiple sessions for same user credentials and avoiding new browser window opening in my w

Posted by Kabeer on Stack Overflow See other posts from Stack Overflow or by Kabeer
Published on 2010-03-18T07:07:08Z Indexed on 2010/03/18 7:11 UTC
Read the original article Hit count: 460

Hello. I want to handle following scenarios in my new web application.

  1. If multiple users log into the application with same credentials, the application should deny access. Since I have out of process session store, I would be able to make out when this situation happens. So I can deny all requests after first successful attempt. This will however not work if the user instead of logging out of the application, closes the browser. The session will continue to reflect in the store for the period of timeout value.

  2. If a user attempts to open a new browser windows (Ctrl+N), the application should defeat this attempt. Every new page can potentially fiddle with cookies. I want to therefore deny the users the ability to open new window.

© Stack Overflow or respective owner

Related posts about new-browser

Related posts about session