How to prevent concurrent login of user from multiple browser

Hi there,

I have been developing an ASP.NET Web application in .NET Framework 4.7.2.I need to incorporate prevention of concurrent login of same user from multiple browsers or from multple devices.I considered to use Session in SQL Server mode for the said purpose.Currently I am facing the following error :-"failed to login to session state sql server for user" after installing aspnet_regsql.exe ,InstallCommon.Sql,InstallSqlState.Sql and InstallSqlTemplate.Sql.The code web.config file is:-

"SQLServer" cookieless="true" regenerateExpiredSessionId="true" allowCustomSqlDatabase="true" stateConnectionString="Data Source=DESKTOP-NT0TKOE\SQLEXPRESS;Initial Catalog=aspnetdb;Persistent Security=true;Integrated Security=SSPI;" timeout="60">

I have also set a field of bit data type which is set to zero by default such that when a user logges in it is updated to one and there concurrent login is denied due to the following code in Login.aspx.cs file:-

TestEntities dbo = new TestEntities();
var flag = dbo.Logins.Where(u => u.Username == this.cntLogin.UserName && u.Password == this.cntLogin.Password).FirstOrDefault();
if (flag != null)
{
var temp = dbo.Tokens.Where(u => u.Username == this.cntLogin.UserName && u.Tokenvalue == false).FirstOrDefault();
if (temp != null)
{
HttpContext.Current.Session["Username"] = this.cntLogin.UserName;
HttpContext.Current.Session["Password"] = this.cntLogin.Password;
FormsAuthentication.RedirectFromLoginPage(this.cntLogin.UserName, this.cntLogin.RememberMeSet);
}
}
else
{
this.cntLogin.FailureText = "Username and/or password is incorrect."; where cntLogin is the Id of asp:Login control.
}

Can you help me out??

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Satya Karki5y ago
Hi, you may get idea from here:

https://forums.asp.net/t/1994714.aspx?How+to+prevent+multiple+logins+in+different+browsers+in+same+user+Id
Sourav Bhattacharya5y ago
The most convenient option that worked for me is replacing the column Tokenvalue with SessionId that stores the current Session-Id. Since SessionId is unique for every session so it can easily distinguish between the concurrent users.
Priyanka K S5y ago
https://forums.asp.net/t/1210069.aspx?Failed+to+login+to+session+state

check this link. He is facing same issue.
Rijwan Ansari5y ago
Use signalR to prevent user to login from different browser.
However, there is another way as well. Check below link.

https://www.codeproject.com/tips/589440/how-to-prevent-the-same-user-id