I installed Squid Transparent with Session External helper [1]. Then I created a PHP login page and user can login with his UserName, Password. But the problem is that when user login via his correct info, other people can login with authorized user's IP. It means it start session for the IP and all people that know his IP can use the internet. How can I limit the user? Is there any acl in squid to bind the IP & Username? Or we have to use PHP Session to limit the session in browser? If yes how can I communicate from server to client to check that the session is active or no?
[1] http://www.andybev.com/index.php/Setting_up_a_captive_portal_from_scratch_using_Debian
Thanks for your help!