Would appreciate it if some on could help:

Here goes.

I am encrypting a password column (without salt).

Here is how I changed the existing column:

1. I saved the value of the password column (VARCHAR 200) to a new column
for safe keeping
2. I created a new column called hashedPassword (varbinary MAX)
3. I saved the hashed value of the password column into this new
hashedPassword column like so: UPDATE [prod].[dbo].[users] SET
hashedPassword = HashBytes('MD5', password)
4. I rename the hashedPassword column to password to create the newly
encrypted password column

---When a user REGISTERS, I enter the password value like so:
HashBytes('MD5', @strPassword),
---When a user logs in, I check the password like so: AND strPasswordII=
HashBytes('MD5',CONVERT(nvarchar,@strPassword)

Here is my dilemma:

For a new user nvarchar works on the log in (AND strPasswordII=
HashBytes('MD5',CONVERT(nvarchar,@strPassword)) but on existing users, only
varchar works.

I have not been able to figure this out. Any suggestions would be greatly
appreciated!

Thanks!


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338513
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to