Pernah dibahas (asumsi user dan password di aplikasi), saya kopikan message-nya:
1. Menggunakan enkripsi
coba gunakan dbms.crypto, utk lebih jelasnya buka www.otn.oracle.com
2. Menggunakan hash
1. Proses penyimpanan (administrasi)
- User (atau admin) meng-input user_id dan user_pwd
- Lakukan hash dari user_pwd utk menghasilkan hash string
- Simpan hash string tersebut ke kolom tabel
2. Proses pengecekan
- User meng-input user_id dan user_pwd
- Lakukan hash dari user_pwd utk menghasilkan hash string
- Bandingkan hash string tersebut dengan hash string yg tersimpan di
tabel.
Prosedur sederhana kira2 seperti ini:
create or replace function hash_pwd
(
p_user in varchar2,
p_pwd in varchar2
) return varchar2 is
v_input_raw raw(100);
v_output_str varchar2(200);
begin
--format input
v_input_raw := utl_raw.cast_to_raw( p_user || p_pwd);
--get hash value
v_output_str := dbms_obfuscation_toolkit.md5( input => v_input_raw
);
return v_output_str;
end hash_pwd;
/
SQL> select hash_pwd('aku','password') from dual;
HASH_PWD('AKU','PASSWORD')
--------------------------------------------------------------------------------
C8CA25D265C49962505325B012BA798D
rgds,
AWAL
----- Original Message -----
From: Heriyanto KO
To: [email protected]
Sent: Monday, July 03, 2006 12:13 PM
Subject: [indo-oracle] enkripsi data password di oracle
dear all,
saya mau nanya nih...
gimana caranya enkripsi password di oracle.
supaya password tidak bisa dilihat via query atau OEM.
thanks
---------------------------------
Yahoo! Music Unlimited - Access over 1 million songs.Try it free.
[Non-text portions of this message have been removed]
[Non-text portions of this message have been removed]
------------------------ Yahoo! Groups Sponsor --------------------~-->
Great things are happening at Yahoo! Groups. See the new email design.
http://us.click.yahoo.com/TISQkA/hOaOAA/yQLSAA/PhFolB/TM
--------------------------------------------------------------------~->
--
-----------I.N.D.O - O.R.A.C.L.E---------------
Keluar: [EMAIL PROTECTED]
Website: http://indo-oracle.blogspot.com
Mirror: http://indooracle.wordpress.com
-----------------------------------------------
Bergabung dengan Indonesia Thin Client User Groups,
Terminal Server, Citrix, New Moon Caneveral, di:
http://indo-thin.blogspot.com
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/indo-oracle/
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
