storing those values in a database is a better idea than storing in a text file.

You should hash the passwords with MD5 or SHA1, SHA256 something (it's
a one way hash) so if someone has access to your database they still
won't have access to user passwords.

Then basically you'll do
select count(userId) from users where password = md5(@password)

and if you get 1 then you're good to go.

On Wed, 14 Jul 2004 12:19:51 -0400, Charles M. Carroll
<[EMAIL PROTECTED]> wrote:
> a text file is such a security risk the code @
> http://www.learnasp.com/learn/security.asp
> does what you want with a Database instead.
>


------------------------ Yahoo! Groups Sponsor --------------------~--> 
Make a clean sweep of pop-up ads. Yahoo! Companion Toolbar.
Now with Pop-Up Blocker. Get it for free!
http://us.click.yahoo.com/L5YrjA/eSIIAA/yQLSAA/saFolB/TM
--------------------------------------------------------------------~-> 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/AspClassicAnyQuestionIsOk/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 

Reply via email to