Max concurrent sessions per user problem

[eluser]pablini[/eluser]
Hi!
I'm working on a project that needs a maximun concurrent sessions per user and i'm having problems implementing it.

Right now my config saves sessions on database and my controller checks for how many users with the same id are logged in. The problem appears to be that codeigniter never deletes the old sessions (when you close your browser/tab).

My current config for sessions is:

Code:

$config['sess_cookie_name']  = 'ci_session';
$config['sess_expiration']  = 100;
$config['sess_expire_on_close'] = true;
$config['sess_encrypt_cookie'] = FALSE;
$config['sess_use_database'] = TRUE;
$config['sess_table_name']  = 'sessions';
$config['sess_match_ip']  = true;
$config['sess_match_useragent'] = TRUE;
$config['sess_time_to_update'] = 1;

and my controller looks like this:

Code:

public function index(){
    if(!($this->session->userdata('logged_in'))){
        //Field validation failed.  User redirected to login page
        $this->load->view('user_login');
    }else{
        //Go to private area
        if(!($this->isAllowed())){
            $this->load->view('max_users');
        }else if($this->hasExpired()){
            $this->load->view('account_suspended');
        }else{
     $this->load->view('home');
}
    }
}
private function hasExpired(){
            $this->load->model('User');
            $u = new User();
            $uId = $this->session->userdata('user_id');
            
            $u->where('id', $uId)->get();
            
            return ($u->days_left <= 0);
        }
        private function isAllowed(){
            $this->load->model('User');
            $this->load->model('Suscription');
            
            $u = new User();
            $s = new Suscription();
            $uId = $this->session->userdata('user_id');
            
            $u->where('id', $uId)->get();
            $s->where('id', $u->suscription_type)->get();
            
            $maxUsers = $s->users_max;
            
            $query=$this->db->query('SELECT * FROM sessions where user_id='.$uId);

            $count=$query->num_rows();

            return $count <= $maxUsers;
        }

An example of the problem is:
User with max concurren session = 1

I log in the site with PC #1
Close the tab/browser
I log in the site with PC #2 -> Error: max users online
I log in (again) with PC#1 -> Error: max users online

Any ideas ???

thanks!

[eluser]GDmac - expocom[/eluser]
1. the old session data is cleared out periodically, (maybe also when you log out manually)

the solution i saw in another app is to not just fail the new login, but to
ask if the user knows that there is another session still active,
and wether you want to continue logging in and close that other session.

[eluser]pablini[/eluser]
That would work but the thing is where you get redirected after a valid login is to a flash app (for little kids) and my client wants to have this kind of filter mainly because his buisness logic (if you want more concurrent sessions pay more).

[eluser]GDmac - expocom[/eluser]
still the same, on re-login, ask or say, and then remove other sessions.

[eluser]pablini[/eluser]
i can´t do that (remember this site is for kids under 5) what i need is more control on the session table some kind of nicer session flush