prevent multiple login using mvc-4

Dheeraj Sharma

i have two table name Register and Login,

when user logs in the, user id and its status=1 will be store in Logins table and when user logs out status will become 0.

my problem is how should i check at login time that user is already logged in or not,

any if conditions to check, below is my code

public ActionResult GetLogin(Register d, Login r)

{

using (simpleEntities _LoginEntities = new simpleEntities())

{

var user = _LoginEntities.Registers.Where(u => u.Email.Equals(d.Email) && u.Password.Equals(d.Password)).FirstOrDefault();

string message = "User already logged in";

if (user != null)

{

List ddd = new List();

ddd = (from a in db.Logins where a.LogID == user.ID where (a.Status == (false)) select a).ToList();

if (ddd!=null)

{

Session["ID"] = user.ID.ToString();

Session["Email"] = user.Email.ToString();

Session["Username"] = user.Fname.ToString() + "" + user.Lname.ToString();

return RedirectToAction("UserDashBoard");

}

else

{

return Json(message, JsonRequestBehavior.AllowGet);

}

return View();

}

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Suraj Kumar8y ago
Hello Dheeraj, you can try as below:

On successfull login you can put a GUID value to the table. If user want to relogin you can check then whether the value in that table already exist or not. If value exist then you can give prompt like "Already Login, Access restricted". This GUID value you can delete at the time of logout.
The table structure can be as below
CREATE TABLE [dbo].[MyPDRAccessManager](
[MyPDRAccessId] [int] IDENTITY(1,1) NOT NULL Primary Key,
[EmployeeCd] [varchar](20) NOT NULL,
[AccessKey] [varchar](150) NULL
)
//At the time of login you can call action as below
public ActionResult IndexAfterLogin()
{
if (Session["LoggedEmpCode"] == null || Convert.ToString(Session["LoggedEmpCode"]) == "")
{
MyPDRAccessManager access = (from m in dbgoal.MyPDRAccessManagers
where m.EmployeeCd == User.Identity.Name
select m).FirstOrDefault();
access.AccessKey = Guid.NewGuid().ToString();
dbgoal.MyPDRAccessManagers.Add(access);
dbgoal.SaveChanges();
if (access != null && access.EmployeeCd != null)
{
Session["LoggedEmpCode"] = access.EmployeeCd;
}
}
return RedirectToAction("Index");
}
//At the time of Logout you can call action like below
public ActionResult LoginOut()
{
MyPDRAccessManager access = (from m in dbgoal.MyPDRAccessManagers
where m.EmployeeCd == User.Identity.Name
select m).FirstOrDefault();
//Delete key from Access Manager table after assigning session
if (Session["LoggedEmpCode"] != null && Convert.ToString(Session["LoggedEmpCode"]) != "")
{
access.AccessKey = "";
dbgoal.Entry(access).State = EntityState.Modified;
dbgoal.SaveChanges();
}

return RedirectToAction("Login");
}
0
Naresh Singhal8y ago
Hi Dhiraj,

as you have already stored logged in user id in session ,

so when you try to login with same id , just compare your current session id = userId and

Status = 1

if this condition is true it mean user is already logged in
+1