Hello,

There's a site with registered users area, they all have their own user/pass.

The problem is, some of then try to share the authentication info with others to help them finish their job.

There's no posibility to restrict by ip adress because there's a dynamic-ip provided for everyone.

What could be the best solution? store sessions in the database? how to restore if they don't logout properly?

Thanks

Originally asked by: gustyaquino on Stack Overflow