Question

I am working on a project that has a requirement such that login details can only be accessed from one machine at one time.

For example, if I grant you access to my website and you login from your home machine, the system will store this settings in a cookie/database. Now if you try the same login details on your work machine or any other machine, the system will not let you log into the system. The login will now only work from home machine.

Any suggestions on how to achieve this would be helpful. Any resources you can point me towards would also be appreciated.

Answer 1

Have an extra date column in your user table called “logintime”.

If user sends username/password and there is no “logintime” for that user then allow login after checking password and write the time now into the “logintime”.

If “logintime” is already set then disallow login.

Flush “logintime” when it gets to old (2 months in your example).