PHP sessions - User Validation

[captlonestar]

Is it possible with sessions to check that the user who is logged in is the only user currently logged in with that account? In other words, I want to make sure that two or more people can't be logged in to the same account at the same time.

If its not possible with sessions, anyone have any ideas on how to do this?

Thanks for your help.

[devinemke]

i suggest you setup a separate table called "logins" that stores the user_id and the login date/time as well as a TIMESTAMP field that is updated on every page request. that way you can track who logs in, when, and for how long. then just add a check of this table in your login routine to make sure only one concurrent login per user_id. the trick is you have to store the logout time as well. if a user forgets to logout (just closes their browser) you need to set the logout time yourself. for that i would run a cron every 5 or 10 minutes to check for inactive logins and log them out automatically after a certain amount of time.