I am doing a md5 hash, and just want to make sure the result of:
md5.ComputeHash(bytePassword);
Is consistent regardless of the server?
e.g. windows 2003/2008 and 32/64 bit etc.
Hopefully someone knows a way to fix this issue, but here is my problem. I need to be able to recreate a md5 hash that will be the equivalent of the hash that php would generate.
The encoding I have tried is listed below. None of these will produce the same values.
UnicodeEncoding
UTF7Encoding
UTF8Encoding
UTF32Encoding
Is this how hashed password stored in SQL Server should look like? This is function I use to hash password (I found it in some tutorial)
public string EncryptPassword(string password)
{
//we use codepage 1252 because that is what sql server uses
byte[] pwdBytes = Encoding.GetEncoding(1252).GetBytes(password);
byte[] hashBytes = System.Security.Cryptography.MD5.Create().ComputeHash(pwdBytes);
return Encoding.GetEncoding(1252).GetString(hashBytes);
}
EDIT: I tried to use sha-1 and now strings seem to look like as they are suppose to:
public string EncryptPassword(string password)
{
return FormsAuthentication.HashPasswordForStoringInConfigFile(password, "sha1");
}
// example output: 39A43BDB7827112409EFED3473F804E9E01DB4A8
Result from the image above looks like broken string, but this sha-1 looks normal....
Is it possible to get window.location.hash on the server-side code alone? [URL]
View 2 RepliesI am trying to insert a string and random number into the database as hash sha1 then loggin in against it. the problem is if I use hash it wont login but if i dont use hash the login works fine... Code below.
insert hash into db
Dim user As New Label
user.Visible = False
user.Text = (myDataReader2.Item("username"))
MyConnection2.Close()
Dim MyConnection3 As New Data.SqlClient.SqlConnection("Data Source=xxx")
Dim mycommand3 As New Data.SqlClient.SqlCommand("Update Register SET [Password] = @password WHERE [username] = '" & user.Text & "' AND [email] = '" & email.Text & "'", MyConnection3)
Dim pass As String
Dim rnd As Integer, randomNum As New Random
rnd = randomNum.Next(1000, 10000)
pass = "Pass" & rnd
mycommand3.Parameters.AddWithValue("@password", FormsAuthentication.HashPasswordForStoringInConfigFile(pass, "SHA1"))
MyConnection3.Open()
mycommand3.ExecuteNonQuery()
login page
Sub Application_AuthenticateRequest(ByVal sender As Object, ByVal e As EventArgs)
' Fires upon attempting to authenticate the use
If Not (HttpContext.Current.User Is Nothing) Then
If HttpContext.Current.User.Identity.IsAuthenticated Then
If TypeOf HttpContext.Current.User.Identity Is FormsIdentity Then
Dim fi As FormsIdentity = CType(HttpContext.Current.User.Identity, FormsIdentity)
Dim fat As FormsAuthenticationTicket = fi.Ticket
Dim astrRoles As String() = fat.UserData.Split("|"c)
HttpContext.Current.User = New GenericPrincipal(fi, astrRoles)
End If
End If
End If
End Sub
Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs)
Dim myConnection As New SqlClient.SqlConnection
Dim myCommand As New SqlClient.SqlCommand
Dim intUserCount As Integer
Dim strSQL As String
myConnection = New SqlClient.SqlConnection("Data Source=jrome2.db.4961680.hostedresource.com; Initial Catalog=jrome2; User ID=jrome2; Password=Richard050283;")
strSQL = "SELECT COUNT(*) FROM Register " _
& "WHERE UserName='" & Replace(txtusername.Text, "'", "''") & "' " _
& "AND Password='" & Replace(txtpassword.Text, "'", "''") & "';"
myCommand = New SqlClient.SqlCommand(strSQL, myConnection)
myConnection.Open()
intUserCount = myCommand.ExecuteScalar()
myConnection.Close()
'Response.Write(intUserCount)
If intUserCount > 0 Then
FormsAuthentication.Initialize()
Dim strRole As String = AssignRoles(txtusername.Text)
'The AddMinutes determines how long the user will be logged in after leaving
'the site if he doesn't log off.
Dim fat As FormsAuthenticationTicket = New FormsAuthenticationTicket(1, _
txtusername.Text, DateTime.Now, _
DateTime.Now.AddMinutes(30), False, strRole, _
FormsAuthentication.FormsCookiePath)
Response.Cookies.Add(New HttpCookie(FormsAuthentication.FormsCookieName, _
FormsAuthentication.Encrypt(fat)))
Response.Redirect(FormsAuthentication.GetRedirectUrl(txtusername.Text, False))
Else
login.Text = "Incorrect Log In Information"
End If
End Sub
Private Function ValidateUser(ByVal strUsername As String, ByVal strPassword As String) _
As Boolean
'Return true if the username and password is valid, false if it isn't
Return CBool(strUsername = " & Replace(txtusername.Text, " AndAlso strPassword = " & Replace(txtpassword.Text, ")
End Function
Private Function AssignRoles(ByVal strUsername As String) As String
Dim myConnection As New SqlClient.SqlConnection
Dim myCommand As New SqlClient.SqlCommand
Dim intUserCount As Integer
Dim strSQL As String
myConnection = New SqlClient.SqlConnection("Data Source=jrome2.db.4961680.hostedresource.com; Initial Catalog=jrome2; User ID=jrome2; Password=Richard050283;")
strSQL = "SELECT COUNT(*) FROM Register " _
& "WHERE UserName='" & Replace(txtusername.Text, "'", "''") & "' " _
& "AND Password='" & Replace(txtpassword.Text, "'", "''") & "';"
myCommand = New SqlClient.SqlCommand(strSQL, myConnection)
myConnection.Open()
intUserCount = myCommand.ExecuteScalar()
myConnection.Close()
'Response.Write(intUserCount)
If intUserCount > 0 Then
Return "client"
Else
Return String.Empty
End If
End Function
Protected Sub LinkButton1_Click(ByVal sender As Object, ByVal e As System.EventArgs)
txtusername.Text = String.Empty
txtpassword.Text = String.Empty
End Sub
I have two pages:
1) login and send username,password, machineID and a rand string to the server
2) check the machineID whether it exists in the table.
Problem is the checking machine procedure:
select MachineID from computer where MD5MachineID=@MD5MachineID2 and SUBSTRING((master.dbo.fn_varbintohexstr(HASHBYTES('MD5',MachineID+@RString))),3,32)=@MIDST
RString,MD5MachineID2,MIDST are submited by Login MD5MachineID is stored in table.
I need the check if MD5(MachineID+RString) is match the MIDST (submited).
Now the situation is :
if RString is a fixed string(not a variable).like 'abcdefg', the MD5 is correct.
if I use the RString (submited value as a variable), the MD5 is incorrect.
I have a price field with some simple regex.
@"^(d*(.d{1,4})?)$"
It should allow positive numbers with an optional decimal, and 1-4 digits after.
So values like
2
22
2.2
2.222
.2
.56
0.64
If I use that regex with Regex.IsMatch, it works as I expect. However if use it as a RegularExpressionAttribute data annotation, It will not accept .2, as being valid. It will accept 0.2, and it will 2, 2.22, etc but it will not allow me to lead with a decimal place. I can hack around it by applying a javascript onkeydown event to add a 0 to front if you lead with a decimal.... Am I missing something here? Does the .net double type it backs into not support leading with .2 or is the jquery validation broken or what???
ASP.NET
When TextBox1.Enabled = false; it has a gray background in FF3, but no change in IE8 or Chrome. So it's harder to tell if it's disabled or not. Is there any more general way to make the disable textbox rendered more consistent on a top-level? So I don't need to change this for every page or every website?
Background: I use stored procedures exclusively for an ASP.NET application. I am using a DataReader to load a dataset object.
View 4 RepliesI have NHibernate sessions cached in the ASP.NET session.
I came across a situation where a user edited an object so it's in their first level cache in the ISession. Another user then edited the same object.
At this point User1 still sees their original version of their edits where as User2 sees the correct state of the object?
What is the correct way to handle this without manually calling session.Refresh(myObj) explicitly for every single object all the time?
I also have a 2nd level cache enabled. For NHibernate Long Session should I just disable the first level cache entirely?
Edit: Adding some more terminology to what I'm looking to achieve from 10.4.1. Long session with automatic versioning the end of this section concludes with
As the ISession is also the (mandatory) first-level cache and contains all loaded objects, we can propably use this strategy only for a few request/response cycles. This is indeed recommended, as the ISession will soon also have stale data.
I'm not sure what kind of documentation this is for it to include both probably and then immediately say the session will have stale data (which is what I'm seeing).
I added a new tab to my Toolbox (Ajax Control Toolkit) and I am not seeing the same tab when I open other instances of my VS 2008?
View 2 RepliesHow can I display photogarphs in an image control so that they are all the same size for an online catalogue without distorting the actual image.
I have taken the photos with a digital camera, loaded them in to Photoshop, cropped the image and finally resized the images to an acceptable size (while constraning proportions to avoid image distorsion).
The problem is that the images all have different height dimensions as while resizing i was able to choose the width that I wanted but as I had to constrain proportions to avoid distorsion, it caused the heights of the images to differ.
On my web form I have an image control that is set to the same width as the images but as the heights of the images differ from one and other, it is impossible for me to set a fixed height that will prevent some of the images being distorted when displayed in the image control.
I have this ListView that has a Drop Down List.Everything works fine (I think/hope) except that the drop down list are not showing its result correctly.This is the code.
Front-End
[Code]....
The code behind consist of the page_load and the ItemDataBound
[Code]....
I'm having a problem with my Linq to XML query. I'm getting the result data I want, but it's nested so deep that there must be a better way.Here is my XML:
[Code]....
I'm trying to get a list (simple string[]) of all Item IDs where Category Names contains "Other".Here is my Linq:
[Code]....
[Code]....
Here is a snapshot of my result from Visual Studio:The results I want are there ("item100", "item400", "item500"), but buried so deeply in the results var.
How can I get the query to return a simple
string[] = { "item100", "item400", "item500" }
I am looking for an example where I create CTE, and then using the result of first CTE, I create another CTE.With CTE1 as ( Col1, Col2, Col3)
(
--SOME RECURSIVE QUERIES
)
select Col1, Col2, Col3 from CTE1 where Col3 >100I want to now use the above query inside a recursive CTE2. One way is to store the above result in a temp table and use the temp table in a new CTE but I am NOT looking for temp table solution here. May be wrap the above result in another CTE, but I am missing the syntax.
I have the following request:
[Code]....
its result is:
ProductSUM
1355
310
210
220
150
95
60
235
90
545
How to SUM these values?
There is a certain query that is being called from an ASP .NET page. I studied the execution plan of that query in Management Studio and 87% is for a sort. I badly need the sorting or else the data displayed would be meaningless.
Is there anyway that I can request SQL Server to cache a sorted results set so it will return the data faster in consequent runs?
Or is SQL Server smart enough to do the cache handling and am I doing mistake by trying to force it to cache results, if that is possible?
UPDATE:
I just read in an article that creating a View with a clustered index will increase performance because the index will persist the data in a view to disk. Is this true? How do i get about doing this?
I need to bring the distinct result in third columnBelow one is my sample table
[Code]....
I am using datetime.now in vb.net to retrieve the current time and date. I passed this parameter into this dim strDate as datetime
strDate = datetime.now
I then saved this strDate into database. However, when I want to retrieve the following date with example, say 2/8/2010 3:58:58 PM
SELECT * FROM CUST WHERE DATE = '2/8/2010 3:58:58 PM'
the result is 0. So i went to SELECT * FROM CUST and realized that the date in the Date column is this:
2010-08-04 15:58:20.000
I have retrieve today's date and saved into database, by right the format should be the same.. May I know what has happened?
I have table with 'usercard' name , and a related tables :
- Computer
- Laptop
- Fax
- UPS
Now , Every Employee has one or more than one from these devices , When I used INNER JOIN in my select query , I didn't get what I need
the result show a one user in 4 rows,(user have all devices)
this script work with join and sum
and works good,but i want to make total sum of the result of this query for all rows of sum column
[Code]....
i am wishing to store the query result in any variable, have look at below code.
[Code]....
I have marked the code with bold, where I am getting error.
how do I store query result in any variable.
I got the following table:
Lane Bin1 Bin2 Bin3
1 B11 B21 B31
2 B21 B22 B23
3 B31 B32 B33
How can i change the layout to
Bin1(Lane1) Bin1(Lane2) Bin1(Lane3) Bin2(Lane1) Bin2(Lane2) Bin2(Lane3) Bin3(Lane1) Bin3(Lane2) Bin3(Lane3)
B11 B21 B31 B21 B22 B23 B31 B32 B33
I tried using pivot, but cant get it.
i have a select statement below. The result of r1- @r1 may be positive or negative.
i want it to always result as positive, so it is a negative number then it to show the same number as positive. can i do this?
e.g.
r1 = 7, @r1 = 4
r1 - @r1 = 3
but
if r1 = 5, @r1 = 6
r1 = @r1 = -1, but i want this to be 1, because i am trying to work out the difference between the two numbers.
can this be done within a select statement? my select statement is:
SELECT imageurl, (r1 - @r1) AS difference
Below the is working fine but I am not getting in month order.
SELECT SUM(TaxableAmt) [NSV], (UPPER(CONVERT(VARCHAR,LEFT(DATENAME(MM,invoicedate),3)))+'/'+ CONVERT(VARCHAR,RIGHT(DATENAME(YYYY,invoicedate),2))) AS MONTHYEAR
FROM SALESDATA where (invoicedate >='4-1-2009' and invoicedate <='4-30-2010')
GROUP BY (UPPER(CONVERT(VARCHAR,LEFT(DATENAME(MM,invoicedate),3)))+'/'+
[Code]....