php - Codeigniter 3 stop multiple logins using ci_sessions database

Solution:

The way I did it was absolutely correct. Fortunately for me all the controller changes I needed to make were all in the folder and it was super simple to make the adjustments.

This is what the login validation flow looks like:

    public function validate_login($from = "") {
        $email = $this->input->post('email');
        $password = $this->input->post('password');
        $credential = array('email' => $email, 'password' => sha1($password), 'status' => 1);

        // Checking login credential for admin
        $query = $this->db->get_where('users', $credential);

        if ($query->num_rows() > 0) {
            $row = $query->row();
            $this->session->set_userdata('user_id', $row->id);
            $this->session->set_userdata('role_id', $row->role_id);
            $this->session->set_userdata('role', get_user_role('user_role', $row->id));
            $this->session->set_userdata('name', $row->first_name.' '.$row->last_name);
            $this->delete_session_user_id();
            $this->session->set_flashdata('flash_message', get_phrase('welcome').' '.$row->first_name.' '.$row->last_name);
            if ($row->role_id == 1) {
                $this->session->set_userdata('admin_login', '1');
                redirect(site_url('admin/dashboard'), 'refresh');
            }else if($row->role_id == 2){
                $this->session->set_userdata('user_login', '1');
                $this->set_session_user_id();
                redirect(site_url('home/my_courses'), 'refresh');
            }
        }else {
            $this->session->set_flashdata('error_message',get_phrase('invalid_login_credentials'));
            redirect(site_url('home/login'), 'refresh');
        }
    }
Copy code

And these are the extra functions i added to complete this

    public function delete_session_user_id(){
        $session_user_id = $this->session->userdata('user_id');
        $this->db->where('user_id',$session_user_id);
        $this->db->delete('ci_sessions');
    }

    public function set_session_user_id() {
        $session_user_id = $this->session->userdata('user_id');
        $this->db->set('user_id',$session_user_id);
        $this->db->where('id', session_id());
        $this->db->update('ci_sessions');
    }
Copy code

All in all was actually a lot simpler than I thought