Password Sharing Prevention

Posts: 60
Joined: 11/27/2007

I am quite interested in using ubercart for a membership site currently live using a variety of bits and pieces. It is a nightmare to keep functioning smoothly. I sell shippable products as well as memberships. The only thing that I can't find is some sort of password sharing prevention. It is not common, but I do see some members sharing their password with people who haven't paid. Somewhere I need to be able to limit the number of IP addresses a member can use for accessing their account. Once that limit is passed, the account should be locked out.

I have searched this site as well as the drupal site and can't find any hints of how to do that entirely within the drupal/ubercart framework.

Any ideas?

Posts: 332
Joined: 08/07/2007
Administrator

You'd need a custom module to accomplish this. hook_user with $op == "login" is called when a user a logs in to a site. You could use this hook in a custom module that would record every IP address a user logs in from. Once a certain threshold of IPs is hit, you can use Drupal's user_save function to set that user account to blocked (status = 0).

--

-Shawn Conn: If the Name Don't Rhyme It Ain't Mine