Sometimes when I have to make a small application that will be hosted in a common ASP hosting, they don't let you install components created in Visual Basic to access SQL Server databases for example.
how would it be the most secure way to avoid putting the connection data and password information to access SQL Server in an .asp page?
Like I said if I create a component through Visual Basic that connects to the database, and instantiate it from an ASP page, it would be safer. but what happens when I don't have access to install components in the server?
My newly rented 2003 Standard Edition dedicated server allows me to access HTML or picture files but asks for username and password when I try and open an a asp page. I have set Authenticated User permissions to Read & Execute and Directory properties to Scripts & Executables. What have I missed?
I have a client who wants to password protect a learning course that is set up in modules. Each module needs to have it's own password protection so users can only access them as they progress through the course.
Each user should have their own password (for each module) and, said client would like the password to expire for the user at some (predetermined?) point. Is this possible? It seems like a lot (in terms of setup), but I don't know much about password stuff.
If it is possible, can someone give me an overview of how it works (theoretically) or where to find more specific info on setting something like this up (in ASP.net)
If it isn't possible, can someone suggest what is more reasonable in terms of protecting the modules?
I created sessions to authenticate username and password. How can I utilize this same script to alert the user to change password at 3rd login? In other words when a user logs into a site after the 3 or 4th time which ever, they are prompted to change their password. Code:
I have created one of those change your password forms whereby the the old password and new password are provided.
What I am having trouble with is ensuring that the old password entered actually exists already. Below is what I have tried, but I am getting a syntax error:
Code:
'Check Password
if request.form("CusPassword")<>rsCheckUser.fields("CustomerPassword") then
response.write "Invalid password"
end if
Else
if request.form("CusPassword")= rsCheckUser.fields("CustomerPassword") then
'write new password to databasestrSQL ="UPDATE Customer Set CustomerPassword ='"& NewPassword& "',CustomerPasswordverified ='"& NewPassword& "' where CustomerEmail = '"&CusEmail&"' "
I want to create a password validation system..... There are two text boxes.... I want to make sure that the passwords are the same and that they are more than 8 characters.
Im planning to encrypt the password that was stored on msaccess database and also the text inputed from a password textbox. Also, if I want to get the password from the database, I need to decrypt it so it can be comparable to the one that is inputed on the textbox. Is there a way on how to handle this?
Public Shared Function Encriptar(ByVal cleanString As String) As String Dim clearBytes As [Byte]() clearBytes = New UnicodeEncoding().GetBytes(cleanString) Dim hashedBytes As [Byte]() = CType(CryptoConfig.CreateFromName("MD5"), HashAlgorithm).ComputeHash(clearBytes) Dim hashedText As String = BitConverter.ToString(hashedBytes) Return hashedText End Function
this function encrypt user password, I need to un-encrypt that password
thanks to sitepoint forum,i am requesting a problem about forgot password . if user forgot his/her password how can i retun his/her same password in email address? i did like this: ...................... <% Set myMail=CreateObject("CDO.Message") myMail.Subject="your password" myMail.From="codes" myMail.To=ml 'ml var return current email address myMail.TextBody=yrpass 'yrpass variable return password myMail.Send set myMail=nothing %> ...................
I have a form and iwant to check if the password which gives the user is between 3 to 6 characters "alpanumeric" there is something in asp code to do this?
Any thoughts on requirements for a password?I've been thinking about the following
Minimum six characters Must contain at least 1 number and at least 1 letter Cannot contain the user's first or last name Cannot contain the user name of the person's email address Cannot contain the domain name of the person's email address
My form accepts user name and password. I want to encrypt the password when I send it to the server. I think I can use windows advapi32.dll functions to encrypt and decrypt the data. Does anybody know if I can use this dll directly in my asp? Do I have to write customized dll which uses advapi32.dll and then use the customized dll in the asp?
i wanted some help in the bewlo subject i tried in different code but some time it is showing wrong error.is anybody give me the example or site linke where i can donwload the the password checking script from database. I have pulled data from database and shown those user name in suer tab ( drop dwon box) user need to select the his name and to type password.once user type the password it should check with database . if it exists then it should capture that user name and move on to next page.
How to use WIndows XP login username and password for ASP 3.0 Authentication, for access to a website directly without any further, second authentication by ASP page?
I have MS SQL Server database, ASP 3.0 website, and ASP 3.0 based authentication. I want to use a Windows XP username, make a table with approved usernames, check Windows XP username and password against the mentioned table, and finally - user can access the site without second authentication by ASP page. Of course - everything should work in IE.
I am using OE6. Instead of using the Main Identity, I'm using another one; it helps cut down the spam. Somehow it switched back to the Main Identity (I didn't fiddle with it) and the other is password protected. Either I have forgotten that password or it isn't responding. How can I recover the password, which is where all my legitmate email is found?
i have new task again.. and i dont know where to start. maybe it seems easy to all of u but i m new and still learning.. so pls forgive me hehee.. i was told to make serveral changes to their shopping cart. 1) Upon user's first login, the system will prompt the users to change their password.(which means every user share a default password tats y they mus change) 2) The system will prompt the user to change their password every 90 days. 3) The System will allow the users to change their password to the same 1 for 10times.. after which.. they cannot use back the same password again. 4) Every password change must be saved as a log into the db.. yah thats all abt it.. but it actually links from 1 to another.
I am trying to write a little script to return a users password, but am getting an error message : "Email address you entered could not be found.The details entered were incorrect." What am I doing incorrectly? the password is in the DB Code:
i have a problem with this password change script. i have test it and i keep getting 'Current Password does not match your password in the database' . in the script, the user must login with the username so that he can access the password change page and make change to the password.
The code which i highlight in red is to have the script recognise the user . the pass=("Customer") is actually to detect the username's password from the Customer's table in database. The field in the Customer's table is User_Password . I have look and relook the code myself but I cant seem to figure out anymore. Code:
An ASP application retrieves records from a SQL Server database. In the first page of the application, the user has to enter a password & the columns retrieved from the DB table depends upon the password. For e.g.
if the password entered is say, pwd1, then that user should be displayed the records of Column1 & Column2 only. If the password entered is say, pwd2, then that user should be displayed the records of Column1 & Column3 only. If the password entered is say, pwd3, then that user should be displayed the records of Column1 & Column4 only.
Now after the records are displayed, the user should also be given the option of sorting the records. I am implementing this by making the column header a hyperlink which has the column name & the sort order as the querystrings, something like this (the records are being displayed in a tabular format): Code:
I need help with a simple (well not so simple for me) password lookup script that will email a user their pw when they put their email in an input box. I have the db set up and the connection enabled but need some help w/ figuring out how to set it up to mail these out.
In my asp I need to make a popup that is like a windows password change, a space for old password, new and new again.
I don't really know how to make a popup that does anything other than display text. I would also need to know how to retrieve the data off of the popup for the actual change of the password. Code:
i would like users to be able to login using a username and password stored in an MS ACCESS database. there is a customer table which stores the username and passwords as well as other customer details such as customer name, address etc. i would like the users to login and then when the login i succcessful, be presented with ONLY THEIR data which they can edit.
Is there a script that I can put in my coding of my Homepage.asp that when a student enters a password instead of it being shown (i.e. 6754345) it will be shown as (i.e. *******)
Is it possible to create a blog on Asp?how can i create a page where you can't access unless log in by user name and password. Link to tutorial works just fine for me!
I was asked by a client to make changes for their Outlook Web Access page where I need to validate Expiry Date of the Password and also the Password Length for the NT Account Policy. Initially I use javascript to do a static validation for the password expiry and password length. There request now include dynamic changes to the Javascript where if the password length is changed on the NT Account Policy, it will reflect on the client side script. Also they request for server side validation as an alternate just in case.
Can someone point me to the resources available for this. I am stuck on this one for quite a while now and no idea on how to proceed?
I have archived PDFs, but I want to restrict access to them to members only. Right now, my members only site uses a session variable to log in users.
Is there anyway to set it up so that users cannot open the PDFs unless they're logged in???
The problem is the members only site is seperate from the site where the PDFs reside. That is, a user goes to mymagazines.com and searches for sometext, and a list of links pops up with all the relevant matches, mostly PDFs. This entire process, is free for all to use.
But when they actually click on the link to the PDF, I want them to log in to the members only site. Is there any way to do this?
When I'm creating database driven asp applications, I store my constants,including my connection string to the database within an asp file calledconstants.asp. All constants are stored inside asp coding <% ... %> so people can't save the data through the web.
I've been told this is an insecure way of storing the connect string becuase my connect string would also store the username and password to connect to the db.what is the current standard for storing an connect string to a database for asp applications?
I have a service which provides video clips with a subscription service, and I have a few big corporations using it. These big corporations all use the same login and password for their company, but the users requesting the passwords will all have different emails, but the part after the @ will be the same. I.E mruser@microsoft.com.I need a script that will only check that part of their email, and based on which one it matches it will send them the correct password for their company.
