mysql - (C#) Reading Username and password from SQL Database for a login -


i've taken interest in hosting own database application's login of have provider allows me use panel have hooked mysql database. made little test login see if figure out how it. code , haven't been able work keep getting login failed i've tried couple different ways appreciated. , know i'm connected database. edited server ip , password privacy purposes. database: http://prntscr.com/ettqn1

using system; using system.collections.generic; using system.componentmodel; using system.data; using system.drawing; using system.linq; using system.text; using system.threading.tasks; using system.windows.forms; using metroframework.forms; using metroframework.design; using metroframework; using mysql.data.mysqlclient;  namespace mysql_testing {     public partial class form1 : metroform     {         static mysqlconnection sqlconnection = new mysqlconnection("server=myserveraddress; database=logins; uid=root; pwd=mypass;");         static string sqlquerry = "select usernames accounts;";         static string sqlquerrypass = "select password accounts;";         static string sqlquerryid = "select id accounts;";         static mysqlcommand cmd = new mysqlcommand(sqlquerry, sqlconnection);         static mysqlcommand cmd2 = new mysqlcommand(sqlquerrypass, sqlconnection);         static mysqlcommand cmd3 = new mysqlcommand(sqlquerryid, sqlconnection);           public form1()         {             initializecomponent();         }          private void form1_load(object sender, eventargs e)         {         }          private void metrobutton1_click(object sender, eventargs e)         {             sqlconnection.open();             //mysqldatareader rdid = cmd3.executereader();             //rdid.close();             mysqldatareader rd = cmd.executereader();             list<string> readuser = new list<string>();             readuser.add(convert.tostring(rd.read()));             rd.close();             mysqldatareader rdpass = cmd2.executereader();             list<string> readpass = new list<string>();             readpass.add(convert.tostring(rdpass.read()));             if (readuser.toarray().tostring().contains(metrotextbox1.text) && readpass.toarray().tostring().contains(metrotextbox2.text))             {                 messagebox.show("login successful");             }             else             {                 messagebox.show("login failed");             }             rdpass.close();             sqlconnection.close();         }     } }

  1. first, should store password field hash random salt, instead of plain text.

  2. you don't need table accounts 3 queries, , not have relation. how know user - password corresponding 3 different queries.

the condition 

readuser.toarray().tostring().contains(metrotextbox1.text) && readpass.toarray().tostring().contains(metrotextbox2.text)

it means accounts table has username , password matched perhaps doesn't belong 1 person.

  1. you use 1 query check login information:

    select * accounts username = @username , password = @password

with parameter passed textbox.

reference link: store password hash


Comments

Post a Comment

Popular posts from this blog

c# - Update a combobox from a presenter (MVP) -

i using mvp in project, new in mvp. have 2 comboboxes. when select option in combobox, combobox should filled new data. this action in presenter. view 'view1' in presenter, , introduced combobox1 , combobox2 properties in 'view1', because need 'datasource', 'displaymember', 'valuemember' , 'refresh()' in method below. but, when using pattern, enough send property like public string combobox2 { { return combobox1.selectedvalue.tosstring(); } } into presenter not whole combobox. how can solve problem? public void onselectedindexchangedcombobox1() { if (view1.combobox1.selectedindex == -1) { return; } datatable dt = tools.getdatatable("a path"); var query = (from o in dt.asenumerable() o.field<string>("afield") == farmerview.combobox1.selectedvalue.tostring() orderby o.field<string>("anotherfield") select...
Read more

How to understand 2 main() functions after using uftrace to profile the C++ program? -

i trying uftrace profile following simple c++ program: #include <iostream> class { public: a() {std::cout << "a created" << std::endl;} ~a() {std::cout << "a destroyed" << std::endl;} }; int main() { a; return 0; } the profile result this: # uftrace a.out created destroyed # duration tid function 2.026 [ 4828] | __cxa_atexit(); [ 4828] | main() { [ 4828] | __static_initialization_and_destruction_0() { 89.397 [ 4828] | std::ios_base::init::init(); 0.768 [ 4828] | __cxa_atexit(); 93.029 [ 4828] | } /* __static_initialization_and_destruction_0 */ 94.425 [ 4828] | } /* main */ [ 4828] | main() { [ 4828] | a::a() { 11.104 [ 4828] | std::operator <<(); 10.825 [ 4828] | std::basic_ostream::operator <<(); 24.514 [ 4828] | } /* a::a */ [ 4828] | a::~a() { 0.978 [ 4828] | ...
Read more

How to put a lock and transaction on table using spring 4 or above using jdbcTemplate and annotations like @Transactional? -

i trying put lock on table while writing on table , if happened in between roll-back . trying convert below code lock table test_g1 read; lock table test_g write; -- begin; start transaction; insert test_g1 values(143); insert test_g values(145); select * test_g1; select * test_g; rollback; select * test_g; unlock tables; how convert above code @transactional spring jdbctemplate code? @transactional(rollbackfor={dataaccessexception.class}) public void test(){ jdbctemplate.execute("insert test1 (id, nam) values (4, 'a')"); throw new dataaccessexception("error") { }; } here trying throw error, insert statement should rollback it's not happening . thanks edit-1 attaching code , doing in jdbcdaoimpl.java , mentioned problem comment above test() . app.java package com.cgiri.javabrains.spring4; import org.springframework.beans.factory.annotation.autowired; import org.springframework.context.applic...
Read more