This is a multi-part message in MIME format.

------=_NextPart_000_0210_01C1FF61.F5C2A7D0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

I am using an access table to store username and password data for my 
users.  ASP script provides login and redirection for authenticated 
users.
What is the best way to keep the same username and password from being 
allowed into my application?

Thank you in advance for any help you can send.

Andy

a) You could have a field in your database that is "set" when the user logs
on. If this field is "set", do not let any more logins under that
username/password account

b) You could have a separate table that stores the UserID, and the time that
this user views each page. This is probably more intensive, but a more
robust solution, since you can also then allow for "expired" sessions. If
the UserID hasn't viewed a page for more than x minutes, or the user has
logged out, then you permit another logon.

Cheers
Ken

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Andy Wischmann" <andy@9...>
Subject: [access_asp] Deny concurrent Users - Solution needed


Hi,

I am using an access table to store username and password data for my users.
ASP script provides login and redirection for authenticated users.
What is the best way to keep the same username and password from being
allowed into my application?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C20094.E69E2980
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,
 
I have an access database on that backend that stores username and
passwords for user logins.
 
I need to know the best way to deny concurrent users from being able to
login to my application.
 
Thank you in advance for your adivce,
 
Andy W.

This is a multi-part message in MIME format.

------_=_NextPart_001_01C200D3.F453DC52
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

You mean concurrent users with the same name or 1 user at all?

	-----Original Message-----
	From: Andy Wischmann - 916Networks [mailto:andy@9...]

	Sent: Tuesday, May 21, 2002 1:58 PM
	To: Access ASP
	Subject: [access_asp] deny concurrent users - solution needed
=09
=09
	Hi,
	
	I have an access database on that backend that stores username
and passwords for user logins.
	
	I need to know the best way to deny concurrent users from being
able to login to my application.
	
	Thank you in advance for your adivce,
	
	Andy W.

This is a multi-part message in MIME format.

------=_NextPart_000_03FF_01C200A0.6A9AEA60
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

MessageI mean:  How do I keep one user name from being logged in 
multiple times from either the same workstation or from different 
workstations.

Thanks
  ----- Original Message -----
  From: Jeroen Diderik
  To: Access ASP
  Sent: Tuesday, May 21, 2002 9:29 AM
  Subject: [access_asp] RE: deny concurrent users - solution needed


  You mean concurrent users with the same name or 1 user at all?
    -----Original Message-----
    From: Andy Wischmann - 916Networks [mailto:andy@9...]
    Sent: Tuesday, May 21, 2002 1:58 PM
    To: Access ASP
    Subject: [access_asp] deny concurrent users - solution needed


    Hi,

    I have an access database on that backend that stores username and 
passwords for user logins.

    I need to know the best way to deny concurrent users from being able 
to login to my application.

    Thank you in advance for your adivce,

    Andy W.

This is a multi-part message in MIME format.

------_=_NextPart_001_01C200F0.DD6D5078
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Try the approuch of storing an array in an application variable.
Insert the user into the array on Session_OnStart (global.asa) and
delete the user from the array at Session_OnEnd
I used this in a chat application to keep track of the users that are
logged in and to keep a ban-list of IP's that are kicked out by the OP.
It worked very well...

Also... if the user closes the browser you can use a timeout of the user
session. But then... the user can't re-login untill the session is
abandonned by the server.
I build a Javascript that had the window.close open up a new window that
had asp code that removed the user from the array.

Lot's of choices and lots of ways to accomplish.. this is just one...

Goodluck,
Jeroen Diderik

 -----Original Message-----
From: Andy Wischmann [mailto:andy@9...]
Sent: Tuesday, May 21, 2002 3:21 PM
To: Access ASP
Subject: [access_asp] RE: deny concurrent users - solution needed



	I mean:  How do I keep one user name from being logged in
multiple times from either the same workstation or from different
workstations.
	
	Thanks

		----- Original Message -----
		From: Jeroen Diderik <mailto:jeroen@i...> 
		To: Access ASP <mailto:access_asp@p...> 
		Sent: Tuesday, May 21, 2002 9:29 AM
		Subject: [access_asp] RE: deny concurrent users -
solution needed

		You mean concurrent users with the same name or 1 user
at all?

			-----Original Message-----
			From: Andy Wischmann - 916Networks
[mailto:andy@9...]
			Sent: Tuesday, May 21, 2002 1:58 PM
			To: Access ASP
			Subject: [access_asp] deny concurrent users -
solution needed
		=09
		=09
			Hi,
			
			I have an access database on that backend that
stores username and passwords for user logins.
			
			I need to know the best way to deny concurrent
users from being able to login to my application.
			
			Thank you in advance for your adivce,
			
			Andy W.