Andrew Norcross

Jason Coleman

<p>WP Bouncer restricts the number of simultaneous logins for the same WordPress user account. The plugin’s goal is to deter people from sharing their login credentials for your site, which is especially important for a paid membership, premium content, or eLearning site.</p>
<h3>How WP Bouncer Protects Shared User Logins</h3>
<ul>
<li>The plugin stores a random <code>FAKESESSID</code> for each user when they log in.</li>
<li>If a user is logged in, on each page load (init hook), WP Bouncer checks if the <code>FAKESESSID</code> stored in the user’s cookies is the same as the last login stored in a transient (<code>fakesessid_user_login</code>).</li>
<li>If the two values do no match, WP Bouncer logs the user out and redirects them to the WordPress login page or a custom page using the wp_bouncer_redirect_url filter.</li>
</ul>
<p>If the WP_BOUNCER_HEARTBEAT_CHECK is defined to true, JavaScript will be loaded to bounce users when a new user logs in with the same login. This is useful for sites with page caching.</p>
<p>Admininstrator accounts or any users with the “manage_options” capability are excluded from bounces.</p>
<h3>Or, Allow a Specific Number of Active Sessions</h3>
<p>By default, WP Bouncer only allows one session per user.</p>
<p>You can use this plugin to offer bulk memberships to corporate, education, or other group-type customers via a shared login.</p>
<p>Use the <code>wp_bouncer_number_simultaneous_logins</code> filter to allow a defined number of active “sessions”.</p>
<p><a href="https://www.paidmembershipspro.com/limit-user-active-sessions/" rel="nofollow ugc">View the Recipe</a></p>
<h3>Example Use Cases for WP Bouncer</h3>
<ul>
<li>User A logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_A” is stored in a WordPress option.</li>
<li>User B logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_B” is overwrites the stored WordPress option.</li>
<li>User A tries to load a page on your site, WP Bouncer catches them and logs them out, redirecting them to the warning message.</li>
<li>User B can browse around the site as normal… unless…</li>
<li>User A logs in again as “user”. Their <code>FAKESESSID</code>, “SESSION_A_v2” is stored in the WordPress option.</li>
<li>Now user B would be logged out if they load another page.</li>
</ul>
<h3>Hooks and Filters</h3>
<ul>
<li><code>wp_bouncer_ignore_admins</code> filter: if returning false even admins will be bounced.</li>
<li><code>wp_bouncer_redirect_url</code> filter: can be used to change the URL redirected to after being bounced.</li>
<li><code>wp_bouncer_number_simultaneous_logins</code> filter: can be set to limit logins to a number other than 1. 0 means unlimited logins.</li>
<li><code>wp_bouncer_login_flag</code>: runs right before bouncing (can be used to potentially stop the bouncing).</li>
<li><code>wp_bouncer_session_ids</code> hook: used to filter session ids when saving them. Passes $session_ids, $old_session_ids (before any were removed/bounced), and the current user’s ID as parameters.</li>
<li><code>wp_bouncer_session_length</code> hook: used to filter how long the session ids transients are set. This way, you can time the transients to expire at a specific time of day. Note that the transient is saved on every page load, so if you set it to 5 minutes, it’s going to push it out 5 minutes on every page load. You should try to set it to (the number of seconds until midnight) or something like that.</li>
</ul>
<h3>Support the Plugin Authors</h3>
<p>If you like this plugin, please check out Jason’s work with <a href="https://www.strangerstudios.com" rel="nofollow ugc">Stranger Studios</a> and <a href="https://www.paidmembershipspro.com" rel="nofollow ugc">Paid Memberships Pro</a> and <a href="http://andrewnorcross.com/" rel="nofollow ugc">Andrew’s work at his personal site</a>.</p>


WP Bouncer – Limit Simultaneous Logins

Deter members from sharing login credentials: restrict simultaneous logins for the same user.

gm_alex

<p>The “User Access Manager”-plugin for WordPress allows you to manage the access of your content. This is useful if you need a member area, a private section at your blog, or you want that other people can write at your blog but not everywhere. Including all post type (post, pages etc.), taxonomies (categories etc.) and files by creating user groups. Just assign the content you want to restrict und and your registered users which should have access to a group. From now on the content is only accessible and writable for the specified group.</p>
<p><em>Try it out</em></p>
<p>You can try it out at TasteWP.com before install: <a href="https://demo.tastewp.com/user-access-manager?a=jlQ7F1va" rel="nofollow ugc">Try user access manager</a> (affiliate link)</p>
<p><em>Feature list</em></p>
<ul>
<li>User groups</li>
<li>Set separate access for readers and editors</li>
<li>Set access by user groups</li>
<li>Set default user groups</li>
<li>Set time based access</li>
<li>User-defined post type (posts, pages etc.) title (if no access)</li>
<li>User-defined post type (posts, pages etc.) text (if no access)</li>
<li>Optional login form (if no access)</li>
<li>User-defined comment text (if no access)</li>
<li>Hide complete post types (posts, pages etc.)</li>
<li>Hide elements in the navigation</li>
<li>Redirecting users to other pages (if no access)</li>
<li>Recursive locking of content</li>
<li>Limited access to uploaded files</li>
<li>Full integrated at the admin panel</li>
<li>Multilingual support</li>
<li>Also protect your rss feeds</li>
<li>Give access by IP-address</li>
<li>Plugin-Api to use the User Access Manager in your on plugins or extend other plugins</li>
<li><a href="https://wordpress.org/plugins/user-access-manager-private-public-extension/" rel="ugc">UAMPPE</a> like behaviour is now build in (Expect negation like !groupName and showprivate and shownotauthorized parameter)</li>
</ul>
<p><em>Included languages</em></p>
<p>See <a href="https://translate.wordpress.org/projects/wp-plugins/user-access-manager" rel="nofollow ugc">https://translate.wordpress.org/projects/wp-plugins/user-access-manager</a></p>
<p>The documentation can be found here: <a href="https://github.com/GM-Alex/user-access-manager/wiki" rel="nofollow ugc">https://github.com/GM-Alex/user-access-manager/wiki</a><br />
Please report bugs and feature requests here: <a href="https://github.com/GM-Alex/user-access-manager/issues" rel="nofollow ugc">https://github.com/GM-Alex/user-access-manager/issues</a><br />
If you are a developer and want to contribute please visit <a href="https://github.com/GM-Alex/user-access-manager" rel="nofollow ugc">https://github.com/GM-Alex/user-access-manager</a><br />
For general questions, like how to set up, best practice and so on please use the support thread here (don’t post issues here): <a href="https://wordpress.org/support/plugin/user-access-manager" rel="ugc">https://wordpress.org/support/plugin/user-access-manager</a><br />
To stay up-to-date follow me on Twitter: <a href="http://twitter.com/GM_Alex" rel="nofollow ugc">GMAlex on Twitter</a></p>


User Access Manager

With the "User Access Manager"-plugin you can manage the access to your posts, pages and files.

WP Bouncer – Limit Simultaneous Logins vs User Access Manager