Question regarding CB AntiSpam

Hello...

We have a huge problem on our site (not related to joomlapolis) with users that share their login details with others and we lose subscriptions.

We installed the CB AntiSpam plugin in order to use the Parameters -> Login -> Duplicates function that seems to be exactly what we need!

We set only "Block Method" to "Logout current session" (nothing else), and tested...

Test with registered user (no admin, moderator or anything else). Just registered

Logged in with firefox browser and then from the same machine we loged in the same user with chrome. It did not work... same user remained logged in from 2 different browsers.

Then we logged in the same user from a different device (mobile, different ip) again without the expected result.

The same user is logged in from 2 locations (IPs)... and the "Logout current session" does nothing.

Probably we are missing something in configuration. Can you please advise?

Thank you.

The Duplicate protection is strictly a database sessions check and when using "Logout Current Session" it just deletes any other database sessions attached to that account. You won't see the logout until the deleted account navigates to a new page and their session is checked. So during your test be sure to either refresh the page or navigate somewhere.

Note there's also account share protection built in as well. This can be enabled under Parameters > Login > Sharing. This actually checks unique ip addresses. This COULD cause problems if someone's ip address changes often so be careful with the share limit and timeframe check.