Thread

In the CP:

——
Allow multiple log-ins from a single account?
Determines whether more than one person can simultaneously access the system using the same user account. Note: If your Session Type above is set to “Cookies Only” this feature will not work.
——

Does this apply to Control Panel Administration or to Users on the front end?

Thanks!

Both, the system does not distinguish.

What I am trying to do is have one username and password to allow multiple people to access private portions of a web site.

I have Users set up for Cookies only and I am able to login with the same user (not Super Admin) from multiple browsers on one machine and at the same time from another machine. According to the user guide this is not supposed to be possible. The login is on the front end to allow access to private parts of a site. The User has no access/permission to Control Panel.

It is working the way I want it to work, but it is not conforming to the user guide. Will this eventually stop working, or do I not have something set up incorrectly elsewhere, or is it a bug?

I am using ExpressionEngine v 1.6.9.

Thanks!

I’ve always been able to login on from multiple machines at the same time. Can you post a link the the doc page where you’re seeing this? Thanks in advance!

http://expressionengine.com/legacy_docs/cp/admin/system_preferences/security_settings.html

The sub-section is: Allow Multiple Log-ins From a Single Account

The problem is that each subsequent login will destroy the session for all previously logged-in users meaning they would be logged out (and, when logging in again, will log out all others). If you want to let users share a username and password you must use cookies exclusively.

So which setting do I have to use? You tell me to use cookies only, otherwise the session will be destroyed. The docs tell me to NOT use cookies only.

Note: If the Session Type above is set to "Cookies Only" this feature will not work. The system can only track multiple people using the same account if a session is generated, which does not happen when only cookies are used.

Who is right?

My apologies. What I described happens when you use cookies only. Yes, you will have to use session ids for this to work. Which, of course, means that people cannot stay logged in permanently. I usually advise against sharing a single login between multiple parties.