Can I make first ip login only can login for everytime only one device can login ?
]]>I have my SESSIONS settings established for the Customer Role to:
Allow from everywhere
— Allowed IP for logins. A user trying to login from a disallowed IP range will always receive a HTTP/403 error.
Unlimited
— Maximal number of IP per user. Requires IP follow-up to be activated – see “Options” tab.
3 sessions per user
— Maximal number of sessions for users.
Block and send a “HTTP 403 / Forbidden” error
— Method to be used when the maximal number of sessions is reached.
Terminate a session when idle for more than 15 minutes
— Idle sessions supervision.
2 days
— Standard cookie duration.
1 week
— “Remember Me” cookie duration.
Doesn’t this mean that if a Customer is logged in that she will be “logged off” once her session has been unused for more than 15 minutes?
If that is the case, it’s not working.
What am I missing?
]]>Hi,
I was wondering why it somehow stopped terminating the session of user even though their cookie has expired.
I tweaked the cookie expiration of a specific user role to 30 minutes using the filter: auth_cookie_expiration.
When the cookie expires, it only logs out the user but on the session manager it says the cookie has expired around 3 mins ago (for example) and not removing the actual session.
I confirmed the session didn’t end since I tried logging in again and it redirected me to the fallback page.
Not sure how to fix this now.
]]>Hi,
My marketing manager needs to access Sessions analytics, but he is not admin in our WordPress instance. How can I grand access to this page ? We use User Role Editor plugin but I can’t find any capability related.
]]>Hi, WordPress tells me:
An active PHP session was detected
“A PHP session was created by a call to the session_start() function. This interferes with REST API and loopback requests. The session should be closed by session_write_close() before making any HTTP requests.”
Is this plugin useful for solving or identifying my problem with the php session remaining active?
Hi folks. Plugin is crashing a development site running PHP 8.2, I suspect because it enforces function signatures matching.
Fatal error: Declaration of DecaLog\EventsLogger::emergency($message, $context = []) must be compatible with Psr\Log\LoggerInterface::emergency(Stringable|string $message, array $context = []): void in /var/www/html/wp-content/plugins/sessions/includes/libraries/decalog-sdk/EventsLogger.php on line 74
We can fix this in our dev environment but it would be nice if this could be fixed so we can put the production site on 8.2. Thank you.
]]>I have set Sessions to terminate a session when idle for more than 12 hours.
I use another plugin (User Login History) to see who is logged in – and here I can see that even though a user is not active (“Last Seen” is one or more weeks ago) the user is still logged in.
Does Sessions not log out an idle user?
Is terminating a session not the same as logging out a user?
Regards,
Kasper
I would like to limit the number of sessions to a single password protected page. Not to a role. How do I do that? Thank you
Also, I would then like to have several pages each protected with a different password and each page with session limitations. Is that possible?
Thank you.
Hi there, I’m wondering if there’s any way to set a session limit that’s more than 9 users but not unlimited (e.g. 30 users for a class group)?
]]>Hey great plugin, I just love to see the session’s table with just one session per user ?? haha
So, I’ve configured the plugin to “override oldest session” for all subscribers. Is there a way to automatically logout the previous session?
I have a page on my site where subscribers have a player where they can listen to a bunch of audio clips. But I’d like to restrict usage to a single device at a time, therefore, if they login on another device, I’d like to expire the first device’s session and close it.
My first thought was to have a JS on the page that checks every minute or so if the current session is still active, and if not, then just redirect the user to the login page. I may have a way to do this with a combination of a JS script calling an endpoint that verifies the session token, but because I saw something similar asked a few years back (https://www.ads-software.com/support/topic/shortcodes-for-user-session-management/), I thought it was better to ask before, just in case there’s a way to do it already.
Thanks in advance
Hi, I noticed that on a site that receives a lot of visits the plugin disconnects users after the selected inactivity period but blocks new accesses as if the session remains active… On my local environment everything is working fine…. What are the plugin requirements ?(php modules, component versions etc.)
The only difference between the environments is in the dashboard where I notice the words “Auto update” below the words “UP TO DATE” in Perfops>Control Center
]]>Hi , i wondering if there is way For Redirect the user to custom page after typing the login and session not allowed ( i don’t want custom massage , i want redirct to page i have made )
]]>Hi, in the situation where a session expires whilst the user has a wep page open (eg the session expires due to inactivity / idle) the default wordpress login page appears to request the user to login again. This is probably default wordpress behaviour.
As I use a custom login page, is there a way to automatically redirect the user to a specific page like my custom login page or the site home page. So if we use the sessions plugin to terminate a session I am thinking it would be good to have a redirection option on session termination (for that session)
Thanks
Tim
]]>Hello,
The Sessions plugin works until I install other PerfOps tools. Specifically trying to add IP Locator and Device Detector. After installing one or both of those plugins, loading the Active Sessions Management page returns a 502 error. Both IP Locator and Device Detector work with/without the Sessions plugin activated.
Looking at the error logs I see this:
PHP Fatal error: Uncaught Error: Class “POSessions\System\Database” not found in /nas/content/live/prep101stg/wp-content/plugins/sessions/includes/features/class-schema.php:201\nStack trace:\n#0 /nas/content/live/prep101stg/wp-content/plugins/sessions/includes/features/class-schema.php(70): POSessions\Plugin\Feature\Schema::purge()\n#1 /nas/content/live/prep101stg/wp-includes/class-wp-hook.php(306): POSessions\Plugin\Feature\Schema::write()\n#2 /nas/content/live/prep101stg/wp-includes/class-wp-hook.php(332): WP_Hook->apply_filters(NULL, Array)\n#3 /nas/content/live/prep101stg/wp-includes/plugin.php(517): WP_Hook->do_action(Array)\n#4 /nas/content/live/prep101stg/wp-includes/load.php(1124): do_action(‘shutdown’)\n#5 [internal function]: shutdown_action_hook()\n#6 {main}\n thrown in /nas/content/live/prep101stg/wp-content/plugins/sessions/includes/features/class-schema.php on line 201, referer: https://prep101stg.wpengine.com/wp-admin/plugins.php?plugin_status=all&paged=1&s
This issue only appears to affect our hosted sites, specifically on WP Engine. I’ve tested on completely separate websites, and I see the same issue. This doesn’t happen on local versions of the same sites, however.
I’ve reached out to WP Engine support, and they sent me back here as it only happens once enabling another PerfOps plugin. Is there anything specific I need to do to get this working on a WP Engine environment? Any insight/help would be appreciated. We’d love to be able to use more than just the Sessions plugin.
Thank you,
Torin
]]>I installed the SESSIONS plug in onto my wordpress site. Once I logged out of the Admin panel, I was unable to log into my website. I kept receiving an error message that said:
“There has been a critical error on this website.”
I have restored the website from a backup and I still get this error message.
Can you please help me?
I have set the Terminate a session when idle for 15 minutes, but it does not appear to work.
I login and load a page in Chrome browser and then just leave that page alone. The logged in user is assigned to a specific role that should terminate the session (see settings below).
Under Tools > Sessions (from a different browser logged in as admin) I can see the users Idle Exp time counting down from 15 minutes (“In X min, Y sec”). Once it gets down to 0 it says how long ago it passed (“X min, Y sec ago). Now if I go back to the first browser with the logged in user and refresh the page, it will simply reload the page and continue as if they were stil logged in. Under Tools > Sessions I can see that the Idle Exp time has returned to counting down again (“In X min, Y sec”).
Settings are as follows:
OPTIONS
– Enabled-Cumulative Privileges
– IP Detection CHECKED
– IP follow up CHECKED
– On password reset CHECKED
– Analytics CHECKED
SETTING BY ROLE (for the users specific role)
– Allow from everywhere
– Max 1 IP Address
– Max 2 sessions per user
– Block and send a WordPress error
– Terminate a session when idle for more than 15 minutes
– standard cookie 2 days
– rememeber me cookie 2 weeks
How is a session determined to be idle?
If a user is watching a video embedded on a page, is this considered idle because they are not “clicking” anything?
Thanks
]]>So I would like to limit users to 1 session only, however I noticed that if I close the browser without logging out, I can not log back in again because the session is still active.
Is there any solution or way around this type of scenario?
]]>Hi Pierre,
Thanks for a great plugin! I seem to have run into a problem with logging out idle users.
Our setup uses WP Download Manager login form to login the user. Here are the settings:
– Maximal number of IP per user: One
– Maximal number of sessions for users.: One
– Idle sessions time: 15 Minutes
– Standard Cookie: 1 Month
– Remember me Coookie: 1 month
I noticed that the counter keeps resetting after every 15-20 seconds and the user is not logged out after 15 minutes.
Please help resolve this issue.
Thanks!!
]]>Здравствуйте! Почему-то не правильно отображает айпи адрес Скриншот
]]>Hi! I just realized, that after resenting the password for a new one, it is impossible to re-start a session, because limit is reached.
This user role that I am testing is set to: 1 ip, 1 session per user, Idle sessions of 17 hours, and 2 days cookies.
what am I doing wrong?
Need to resolve this, cant let my many users hanging if they change their passwords.
Hope you can help me! its kind of urgent!
Thanks in advance
Hi, i am really loving the plugin, is just what i needed, but….since installing it I am getting A LOT of Error 524 timeout …..I dont know what to do.
Can anyone help me?
thanks in advance
Hi – I have a request/suggestion for your Sessions plugin.
I would like to be able to specify a number (greater than 9) as “Maximal number of sessions for users”.
Right now I can choose between “No limit” and then a long list of 1 to 9 sessions per user (or sessions per user and per IP address etc.).
I would like to be able to admit a specific user a number of allowed concurrent sessions based on their user role.
As an example:
User “One” (with user role “Five”): 5 concurrent sessions
User “Two” (with user role “Twenty”): 20 concurrent sessions
User “Three” (with user role “Forty”): 40 concurrent sessions
So the number for “Maximal number of sessions for users” should just be an integer input – not a number to pick from a list of 1 to 9.
Then the type of limitation could be moved to a separate field (“per user”, “per user and per IP adress” etc.)
The usecase is this:
I have a website with learning material. My customers are language-schools for adults.
I want a school to be able to buy access to the website based on how many students they have.
E.g. a school that has two courses with 25 students in each course. This school could buy access to all 50 or maybe only 25 if they do not intend to teach both classes/courses at the same time.
I need to avoid giving each student their own login to the website, since it is a mess to manage (for them as well as for me).
I hope you will consider this suggestion.
Thanks for an (otherwise ?? great plugin!
Regards
Kasper Rander
Communiko
Hi,
I have seen this thread: https://www.ads-software.com/support/topic/failure-to-invalidate-session-on-password-reset-2/
So it seems that Sessions can invalidate a session on password change.
My question is as following:
I don’t need any fancy features. All I’m trying to achieve is invalidate session on password change. Can I disable all/most features of the plugin and leave just that one?
Thanks!
krko
Hello! Thanks for your great plugin! You are doing a great job!
Could you help me?
I found that when we change password by password reset form one browser in place of session Expire from other browser its just update password from other browser and the old session got updated without being logout
Steps to check Session Management issue On password reset:
1- Login to your account in one browser.
2- Generate password reset link in second browser for the same account
3- Open the password reset link in second browser and change the password.
4- Your Session Got Updated in place of expiration`
Do you plugin can help with this?
Any help would be greatly appreciated. Please advise.
Thank you!
Hallo,
sorry to ask but I am not able to start Session Manager. There is no link after installation.
I can start the statistics. But how to start the Session Manager like in the Screenshot.
Btw. this is an absolute great piece of work. Keep you great work up.
Best
David
Hi there,
Thank you for such nice plugin.
I am here to request you for a dashboard box (scree element) which will show /wp-admin/admin.php?page=pose-manager as a screen element on WordPress Dashboard screen.
Thank you
]]>Hello. Sessions are not automatically deleted after idle timer is ended.
Screenshot is here: https://ibb.co/xDQHPtX
As you can see, the idle timer has expired a long time ago, but sessions was not deleted from the table.
Could you help me and tell how to fix this?
]]>Hello Pierre
We use a site in dev and a site in prod.
The website sells paid content by subscription with the paidmembershipspro plugin. Our user base has over 100,000 entries.
During the tests everything went well but we had emptied all the sessions.
When we went into production, we noticed that in PerfOps Sessions Tools only 6000 entries were coming up. Then if in the user’s profile page it was well indicated 3 sessions, once clicked on “Manage” no statistics came up and therefore impossible to delete IPs.
Do you think there is a limit to the number of entries?
Before deactivating the plugin in prod a customer wrote to us that he could not connect and received the error message. However, he had only 3 active sessions (checked in his profile and in the database) whereas our limit was set to 4 simultaneous connections.
It’s really a pity because the plugin in dev was perfectly suitable for us.
]]>Hi! Thx again for the awesome plugin. Can you help me with that case.
When the session was manually cleared but the cookies is on the user side. When the user tries to exit so that WordPress annoying page appears with the exit link.
How to prevent this. Or to add smth to the func.php?
I’m using Profile Builder Pro and Fastest Cache (no cache for logged in users).
Everything works really well BTW. I’ve set the Sessions plugin as never kill idle sessions. Cookie – default.
But this error sometime annoys me.
]]>