If I change Session Type to “cookies only” then I won’t be able to set “Allow Multiple Logins From a Single Account” to No, correct? One of the requirements of this particular site is to not allow multiple logins from one account since we have paying members and don’t want them sharing one username/paid account among many people.
Also, from our log files, I can see that there is the same Session ID with several different IP addresses within the same minute (actually, within the same few seconds… and oddly, these IP addresses don’t even look to be from the same block of IPs - totally different providers), which seems very odd. There’s no way that somehow different users in the same hotel conference room on a WiFi connection with dynamic IP are somehow getting served the same Session ID, is there?
Is my only hope to switch to Cookies Only and just cross my fingers that paying members don’t share their username and password with all their friends and coworkers?