I'm building an E-Learning system with Magento, and would like to avoid customer to share it's credentials with others. In other words, to avoid them to have multiple sessions with the same account.
The closest solution I've imagine, was saving sessions in DB (instead files), and add some customer_id column on core_session database, extending some core classes.
Is there an easier or better approach for doing that?
Take a look at log_visitor and log_visitor_online tables.
The answer from Tim is a bit uncomplete but you need to have a look at these tables begin with log_*. It will permit you to know wether a customer is active on the website at the moment and details about the browser used to access it. Thanks to a link between log_visitor_info and log_customer.
Using that, you can call an observer to check if the user is already active. As far as I know, there is not a default solution.
Not only is this hard to accomplish robustly, it will also degrade the experience for the customer. Imagine he's signed in at computer A (work) and forgot to log out, wants to log in at computer B (home) and finds out he still has an active session.
