Re: Secure storage of Web user's passwords in a database

From: replace this with _at_ <_at_)xs4all.nl>
Date: 1998/10/13
Message-ID: <362380cb.1842980@news.xs4all.nl>#1/1

On Mon, 12 Oct 1998 21:21:16 +0300, Kudryavtsev Georgiy <georgiy_at_online.ru> wrote:

>I'm looking for method to close web user's passwords
>storing in database table.

I've been struggling with the problem and have no real solution. Maybe you're not looking for the following, but it may be useful. When calling the function from your internet-app, you retrieve the identifier which you can use to construct your sql-statements.

If you retrieve better solutions by email, please forward them to martinj_at_xs4all.nl. Thanks!

CREATE OR REPLACE FUNCTION ICS_CONTROLE

  (P_NAME                 IN  VARCHAR2
  ,P_PASSWORD             IN  VARCHAR2
  ,P_IDENTIFIER           OUT NUMBER

)
  RETURN VARCHAR2
  IS
BEGIN   SELECT IDENTIFIER

  INTO      P_IDENTIFIER
  FROM      MY_PASSWORD_TABLE
  WHERE     UPPER(NAME)     = UPPER(P_NAME)
  AND       UPPER(PASSWORD) = UPPER(P_PASSWORD);

  RETURN('OK'); EXCEPTION   WHEN NO_DATA_FOUND THEN
    P_IDENTIFIER := 0;
    RETURN ('BAD');
END;
/

Martin Jesterhoudt
martinj(replace this by @)xs4all.nl

Received on Tue Oct 13 1998 - 00:00:00 CDT