I read this on another forum today and was shocked by it because I am in the same situation as the poster (I intended creating a membership site)....

I have just found out that anyone can abuse password sharing on Joomla 1.5. I was using Joomla 1.0 where if multiple users would try to use the same password the systems would log out the second user. I recently upgraded to 1.5.7. I was only just told now that you could share passwords on Joomla 1.5. I found this this out the hard way today when I did a test to see if I would get booted off when I used the same password as another user that I knew was already online.

How is it possible that an entire industry goes merrily on its way without warning commercial clients that anyone can share passwords with their friends and worse on website forums etc, robbing us commercial members website operators of our income.

From the response it appears that the poster is correct...

Does any one have any information and /or comments?