Click here to Skip to main content
15,915,501 members
Home / Discussions / Database
   

Database

 
GeneralSQL Server 2000 date comparision Pin
Sarvesvara (BVKS) Dasa23-Jan-04 22:28
Sarvesvara (BVKS) Dasa23-Jan-04 22:28 
GeneralRe: SQL Server 2000 date comparision Pin
Mazdak24-Jan-04 2:10
Mazdak24-Jan-04 2:10 
GeneralRe: SQL Server 2000 date comparision Pin
Sarvesvara (BVKS) Dasa24-Jan-04 17:45
Sarvesvara (BVKS) Dasa24-Jan-04 17:45 
GeneralRe: SQL Server 2000 date comparision Pin
Serge Lobko-Lobanovsky28-Jan-04 23:17
Serge Lobko-Lobanovsky28-Jan-04 23:17 
GeneralSQL Password Validation Does Not Work Pin
Brendan Vogt23-Jan-04 2:16
Brendan Vogt23-Jan-04 2:16 
GeneralRe: SQL Password Validation Does Not Work Pin
Steve S23-Jan-04 2:25
Steve S23-Jan-04 2:25 
GeneralRe: SQL Password Validation Does Not Work Pin
Mazdak23-Jan-04 2:32
Mazdak23-Jan-04 2:32 
GeneralRe: SQL Password Validation Does Not Work Pin
Mike Dimmick26-Jan-04 2:44
Mike Dimmick26-Jan-04 2:44 
You should never store passwords in clear text. If anyone manages to obtain the database (downloading the file, executing a SELECT via a SQL injection attack, etc), your entire authentication mechanism is compromised. Users will not be happy if they've used the same password for multiple systems/websites/whatever, and you've disclosed it.

You should calculate a secure hash (using a cryptographic hashing/message digest scheme, not one you invent yourself) and store that in the database (you'll probably need to convert the bytes to hexadecimal). When authenticating a user, you again hash the provided password and compare with the stored one.

To calculate a cryptographic hash, you can use the CryptHashData function in the Windows API, the CAPICOM object library (if using VB 6 or a scripting language), or the System.Security.Cryptography.HashAlgorithm .NET Framework class.

There are various other techniques that are an extension of this which can provide more security, such as encrypting the hash, and/or adding a random 'salt' to the password before hashing.
GeneralFormatting MSDE Output Pin
monrobot1322-Jan-04 18:52
monrobot1322-Jan-04 18:52 
GeneralRe: Formatting MSDE Output Pin
Not Active23-Jan-04 3:51
mentorNot Active23-Jan-04 3:51 
GeneralRe: Formatting MSDE Output Pin
monrobot1323-Jan-04 10:54
monrobot1323-Jan-04 10:54 
QuestionCount rows with SqlDataAdapter?? Pin
hxxbin22-Jan-04 11:52
hxxbin22-Jan-04 11:52 
AnswerRe: Count rows with SqlDataAdapter?? Pin
-Dr_X-22-Jan-04 12:13
-Dr_X-22-Jan-04 12:13 
AnswerRe: Count rows with SqlDataAdapter?? Pin
Mike Dimmick23-Jan-04 0:17
Mike Dimmick23-Jan-04 0:17 
GeneralRe: Count rows with SqlDataAdapter?? Pin
hxxbin26-Jan-04 4:38
hxxbin26-Jan-04 4:38 
GeneralDatabase name via ADO Pin
Mike Eriksson22-Jan-04 1:03
Mike Eriksson22-Jan-04 1:03 
GeneralAccess query Pin
toticow22-Jan-04 0:28
susstoticow22-Jan-04 0:28 
GeneralRe: Access query Pin
gpa200022-Jan-04 0:42
gpa200022-Jan-04 0:42 
GeneralRe: Access query Pin
totig22-Jan-04 0:44
totig22-Jan-04 0:44 
GeneralRe: Access query Pin
Roger Wright22-Jan-04 14:42
professionalRoger Wright22-Jan-04 14:42 
GeneralRe: Access query Pin
Mike Dimmick23-Jan-04 0:21
Mike Dimmick23-Jan-04 0:21 
QuestionViewing the contents of a .mdb (Access) database? Pin
IGx8921-Jan-04 7:00
IGx8921-Jan-04 7:00 
AnswerRe: Viewing the contents of a .mdb (Access) database? Pin
Mazdak21-Jan-04 7:07
Mazdak21-Jan-04 7:07 
GeneralRe: Viewing the contents of a .mdb (Access) database? Pin
IGx8921-Jan-04 7:32
IGx8921-Jan-04 7:32 
GeneralRe: Viewing the contents of a .mdb (Access) database? Pin
Guillermo Rivero21-Jan-04 7:49
Guillermo Rivero21-Jan-04 7:49 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.