Re: How to check the Password in C# and SQL?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I would find it hard to believe the password column in your SQL server 2000
can be decrypted into something that the .Net framework would understand,
but I haven't tried it.

I've used md5 on the password. This makes the trip one way, as you can not
determine the original password from the md5 checksum. This is slightly
more secure than encrypting the password, then decrypting the password for
comparison (it's more like encrypting both the original, and the comparison
passwords to see if they generate the same checksum). I md5 the password
when I save it originally, then md5 any password from a logon attempt. If
they derive the same number, then statistically speaking the md5 checksum
was derived from the same password for both. Of course, I would enforce a
password length of some sort.

Scott
NetConquer

"Jason Huang" <JasonHuang8888@xxxxxxxxxxx> wrote in message
news:O11%23dpYcFHA.3492@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> The Password column in SQL server 2000 is a datatype of "image", then how
> do I check the password in the C# responding to the "image" datatype?
> Thanks for help.
>
> Jason
>


.

Relevant Pages

  • Re: How to save PASSWORD in SQL Server with bit or binary type dat
    ... Dave ... > retrive information from SQL Server using MD5 and how to store it new user ... > account information as UserName and UserPassword using MD5. ...
    (microsoft.public.dotnet.general)
  • Re: md5 encryption - Be careful!
    ... Be careful when you test the encryption function using the site! ... If you are using the function to generate the md5 string from your password, ... >>probability with decrypting is astronomical. ...
    (alt.php)