RE: [KCFusion] MS SQL and query results
Daryl: It is, and I hadn't thought of breaking apart the process that way. H P.S. Luke Templin: I'm assuming you're referring to potential security issues. I see your point, but I've got several methods to monitor and control what happens in this particular (private) site. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Monday, January 28, 2002 11:11 AM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] MS SQL and query results Assuming the username is unique, simply drop the "and Pword = '#Trim(form.Pword)#'" and check the password match at the application layer. --Daryl - Original Message - From: "Keith Purtell" <[EMAIL PROTECTED]> To: "KCFusion (E-mail)" <[EMAIL PROTECTED]> Sent: Monday, January 28, 2002 11:02 AM Subject: [KCFusion] MS SQL and query results If I query a MS SQL7 db asking for a record that matches two values, and the query can't make a match, is there a way to tell which of the values didn't match? In the query below is there a way to know that the username matched but the password did not? The only way I can think of to do this is two different queries. I'm trying to provide more meaningful error messages when user logins fail. SELECT Username, Pword FROM TableName WHERE Username = '#Trim(form.Username)#' AND Pword = '#Trim(form.Pword)#' Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] MS SQL and query results
Assuming the username is unique, simply drop the "and Pword = '#Trim(form.Pword)#'" and check the password match at the application layer. --Daryl - Original Message - From: "Keith Purtell" <[EMAIL PROTECTED]> To: "KCFusion (E-mail)" <[EMAIL PROTECTED]> Sent: Monday, January 28, 2002 11:02 AM Subject: [KCFusion] MS SQL and query results If I query a MS SQL7 db asking for a record that matches two values, and the query can't make a match, is there a way to tell which of the values didn't match? In the query below is there a way to know that the username matched but the password did not? The only way I can think of to do this is two different queries. I'm trying to provide more meaningful error messages when user logins fail. SELECT Username, Pword FROM TableName WHERE Username = '#Trim(form.Username)#' AND Pword = '#Trim(form.Pword)#' Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
RE: [KCFusion] MS SQL and query results
You may want to reconsider letting someone know that the account # is right but the password is wrong. -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Monday, January 28, 2002 11:03 AM To: KCFusion (E-mail) Subject: [KCFusion] MS SQL and query results If I query a MS SQL7 db asking for a record that matches two values, and the query can't make a match, is there a way to tell which of the values didn't match? In the query below is there a way to know that the username matched but the password did not? The only way I can think of to do this is two different queries. I'm trying to provide more meaningful error messages when user logins fail. SELECT Username, Pword FROM TableName WHERE Username = '#Trim(form.Username)#' AND Pword = '#Trim(form.Pword)#' Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
[KCFusion] MS SQL and query results
If I query a MS SQL7 db asking for a record that matches two values, and the query can't make a match, is there a way to tell which of the values didn't match? In the query below is there a way to know that the username matched but the password did not? The only way I can think of to do this is two different queries. I'm trying to provide more meaningful error messages when user logins fail. SELECT Username, Pword FROM TableName WHERE Username = '#Trim(form.Username)#' AND Pword = '#Trim(form.Pword)#' Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
