laceous

Due to lack of interest (both my own and based on the number of downloads) this plugin will not be updated for WP 3.0
WordPress’ auth cookies include a built-in expiration date (either 2 or 14 days depending on if the ‘Remember Me’ option is checked). Even if you remove the client-side cookie (by manually logging out or just closing your browser if ‘Remember Me’ wasn’t checked when logging in) the data that was stored within the cookie is still valid until the expiration date is reached.
This could be an issue if someone managed to “steal” your cookie(s). They would still be able to access your website for some time into the future.
This plugin will immediately invalidate your auth cookies when you manually log out. This, of course, also means that you have to manually click ‘Log out’ for this plugin to work properly (you can’t just close your browser to remove any cookies that expire at the end of the session). This won’t prevent session hijacking, but should limit the amount of time that an attacker can access your website.

Invalidate Logged Out Cookies

This plugin will immediately invalidate your auth cookies when you manually log out.

Joel James

Duck Dev

Loggedin is a lightweight WordPress plugin that lets you easily limit the number of simultaneous active sessions a user can have. This is a crucial feature for membership sites, online courses, and other platforms where you need to prevent users from sharing their accounts.
<h3>🎁 Features</h3>
<ul>
<li>Set Global Limits: Define a maximum number of concurrent logins for all users.</li>
<li>Flexible Login Behavior: Choose to either block new logins when the limit is reached or automatically log out the oldest session to allow a new one.</li>
<li>Prevent Account Sharing: By limiting sessions, you can effectively stop users from sharing their login credentials with others.</li>
<li>Admin Control: Easily force log out a user from the admin dashboard, giving you full control over active sessions.</li>
<li>Developer-Friendly: The plugin is built with a hook-based architecture, making it highly customizable and extensible for developers.</li>
</ul>
<h3>📦 Addons</h3>
Enhance LoggedIn’s functionality with these simple yet powerful <a href="https://duckdev.com/addons/loggedin/" rel="nofollow ugc">add-ons</a>.
<ul>
<li>
<a href="https://duckdev.com/addon/limit-per-user/" rel="nofollow ugc">Limit Per User</a>: For more granular control, the Limit Per User addon allows you to set specific login limits for individual users, overriding the global settings. This is perfect for offering different tiers of access or special privileges.
</li>
<li>
<a href="https://duckdev.com/addon/limit-per-role/" rel="nofollow ugc">Limit Per Role</a>: For flexible, group-based control, the Limit Per Role addon allows you to set specific login limits for individual roles, overriding the global settings. This is perfect for managing access across different user groups or membership tiers.
</li>
<li>
<a href="https://duckdev.com/addon/real-time-logout/" rel="nofollow ugc">Real-time Logout</a>: This add-on ensures a truly seamless experience by checking for logouts in real time. When a user’s session is terminated in the background due to a login limit, the add-on will automatically refresh their page, instantly restricting access.
</li>
</ul>
<h3>🐛 Bug Reports</h3>
Found a bug? We welcome your bug reports! Please report any issues directly on the <a href="https://github.com/Joel-James/loggedin/issues" rel="nofollow ugc">Loggedin GitHub repository</a>.
Please note: GitHub is for bug reports and development-related issues only. For support, please use the WordPress.org support forums.

Loggedin – Limit Concurrent Sessions

Good Plugin

Good

Lightweight plugin that limits an account to a specific number of concurrent logins.

Invalidate Logged Out Cookies vs Loggedin – Limit Concurrent Sessions