|
You can mark a column as UNIQUE which ensures its value doesn't repeat. However, I don't believe that fits your requirements.
What if two independent users happen, by chance, to pick the same password? What if one of them is mallicious? The fact the second user cannot choose their password means they know someone else already has that password. Now their brute force attack on the system is faster because they have a known password and just have to match it to an existing user.
Most systems don't allow a user to duplicate a password they've used in the past. I would guess that it your requirement. In which case you need to store a history of passwords for each user.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
Colin Angus Mackay wrote: What if two independent users happen, by chance, to pick the same password?
Thanks, But this is not the real scenario. I just given a simple example about my requirement. I am using this in another table. Not using for users. Any other way to ensure both of the fields won't repeat ?
|
|
|
|
|
What he told you to do, solves the problem. He was just telling you why not to do it with passwords.
Christian Graus - Microsoft MVP - C++
Metal Musings - Rex and my new metal blog
"I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )
|
|
|
|
|
Navaneeth. wrote: Thanks, But this is not the real scenario
Why not tell us the real scenario? It would have mean I didn't have to write all those warnings about security which are, only now, obviously not needed.
Sometimes I really wonder whether I'm wasting my time helping here or not.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
Real scenario is, I store ItemCode and ItemName in one table. ItemCode is primary key. I don't want to repeat ItemName also. For that I tried this. Actually I just given a example about username and password to understand the problem easily. But I think I am mistaken and my first example made lot of confusion. Sorry.
Colin Angus Mackay wrote: Sometimes I really wonder whether I'm wasting my time helping here or not.
Never. Your postings are excellent. You are doing good job. Thanks
|
|
|
|
|
Colin Angus Mackay wrote: Sometimes I really wonder whether I'm wasting my time helping here or not.
Not only the poster whom you are replying gets benefited.
It helps everyone who sees you reply.
Colin Angus Mackay wrote: I didn't have to write all those warnings about security
These warning may help others.;)
So you are not wasting you time.
Regards,
Arun Kumar.A
|
|
|
|
|
Instead of creating a single primary key per field, you can select all of the fields that you want and create it as a primary key in one go.
Deja View - the feeling that you've seen this post before.
|
|
|
|
|
Thanks, I tried that SQL Server created all the selected fields as primary. But still it is checking only the last field. Remaining all fields in the primary list are allowing repeats. Any other alternative for this ?
|
|
|
|
|
The primary key as a whole will be unique. Individual elements within the primary key may not be unique.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
If the fields must be unique, then you need to implement a unique index on each field that you want to be unique, e.g.
CREATE UNIQUE
INDEX [] ON [dbo].[Workspace] ([Description])
Deja View - the feeling that you've seen this post before.
|
|
|
|
|
Hi,
I work on a project which transfer an access database in mysql.
My problem is that I have a function which convert a binary information in mysql and that function doesn't work so good. This function looks like this:
While i <= Len(str)<br />
<br />
Select Case Mid$(str, i, 1)<br />
<br />
Case Chr(0) ' ASCII NUL<br />
'nlstr = ""<br />
rstr = "\0"<br />
<br />
Case Chr(8) ' backspace<br />
'nlstr = ""<br />
rstr = "\b"<br />
<br />
Case Chr(9) ' tab<br />
'nlstr = ""<br />
rstr = "\t"<br />
<br />
Case Chr(180)<br />
'nlstr = ""<br />
rstr = " '' "<br />
<br />
Case "'"<br />
'nlstr = ""<br />
rstr = "\'"<br />
<br />
Case """"<br />
'nlstr = ""<br />
rstr = "\"""<br />
<br />
Case "\"<br />
'nlstr = ""<br />
rstr = "\\"<br />
<br />
Case Chr(10) ' line feed<br />
'nlstr = ""<br />
rstr = "\n"<br />
<br />
Case Chr(13) ' carriage return<br />
'nlstr = ""<br />
rstr = "\r"<br />
<br />
End Select<br />
<br />
If rstr <> "" Then<br />
str = Left$(str, i - 1) & rstr & Right$(str, Len(str) - i)<br />
i = i + Len(rstr)<br />
rstr = ""<br />
Else<br />
i = i + 1<br />
End If<br />
<br />
End While<br />
<br />
where str is the information.
If you have an idea please help me.
Thanks.
|
|
|
|
|
Why don't you read this[^] for a better post ?
|
|
|
|
|
Hi,
sorry if i crosspost,but i hadn't noticed this forum section,which is more suited to my question.I'm writing an app with MS VC++ 6,using ADO (the oldest one,not ADO.NET) to connect to an Access database.Now iu would like to use a MySQL database instead.Is it possible?What should i change in my code?
I'm kinda confused,because i have found,in MySQL site,the C API for My SQL,but using that would force me to write lots of new code,instead i was thinking that,with ADO,a single change to the connection string would be enough:is that true?
|
|
|
|
|
|
Thank you,i think it will help me 
But i have a question,due to my ignorance about databases 
Reading the article i noticed that for a DSN-less connection there are many alternatives,depending on (i think) the database i would use.For a DSN connection,instead,i have the only ODBC DSN.
So my (newbie) questions are:is DSN a way to standardize connections to a database?Is it related to ODBC or are they two indipendent concepts?
|
|
|
|
|
hello friends here is the query for report generating depend upon the fromdate and todate this include a subquery.if we are selecting the same month means its not a problem we are moving to previous month it showing an error in subquery like this:
(1002 row(s) affected)
Server: Msg 512, Level 16, State 1, Line 1
Subquery returned more than 1 value. This is not permitted when the subquery follows =, !=, <, <= , >, >= or when the subquery is used as an expression.
Plz help me friends
here is the syntax:
SELECT isnull((select p.name_first+'['+rtrim(ltrim(str(pid)))+']' from hms_person p where
p.pid = msts.patientid),patientname) as patientname, msts.salesid,billno, billingdate,billAmount,convert(numeric(16,2),(AmountReturned)) as
actualreturn ,convert(numeric(16,2),(amountpaid))Amountpaid,
isnull((select recdamount from trnreceipts tr where viabill=1 and creditcardno is null and tr.billno =msts.billno
and recddate = msts.billingdate),0) as cashchqamt,isnull((select recdamount from trnreceipts tr where viabill=1 and
tr.creditcardno is not null and tr.billno =msts.billno and recddate = msts.billingdate),0) as cardamt,(billamount -
isnull((select recdamount from trnreceipts tr where viabill=1 and tr.billno =msts.billno and recddate =
msts.billingdate ),0)) as credit ,msts.soldby FROM MstSales0706 AS msts where billingdate >='6/1/2007' and
billingdate <='6/14/2007' order by billingdate,msts.salesid
kankeyan
|
|
|
|
|
Try giving Select top 1 for all the sub queries. This will avoid the error, but remember this is not a good solution. If sub query is returning more than one values, then that shows the failure of your database. May be the unique key you are referring in the sub query got repeated.
|
|
|
|
|
i made a login form with username--textbox,password--textbox and with 1 submit button..then i created 1 database in the name of "pranay" and then i created 1 table in the name of "login" with 2 column 1 for username and another for password..then i wrote some data in username column and password column..
now i want that when i will write the username and password in login form and when i will press the submit button .it should check from the database i created that its correct or not ,if its correct then i want that the page should redirect to another page and if its incorrect the page should direct to the same page...
pls help me in getting the code![Rose | [Rose]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/rose.gif)
pranay akul
|
|
|
|
|
I presume that since you are asking on the SQL forum you are looking for database code. However, currently it would look like you are storing the passwords in clear text - That would be a bit of a security issue.
SELECT COUNT(*) FROM login WHERE username=@UserName AND password=@Password
This will result in a zero if the user name and password combination does not exist. And a 1 if it does exist. Any other value indicates the data is corrupted.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
rahulesquire wrote: pls help me in getting the code
How to help you with the entire code for your long story. First you pass the values to a stored procedure which checks the login details. That could be something like this.
CREATE PROCEDURE LoginCheck
(
@LoginName varchar(50), @Password varchar(50),
@IsAuthenticated varchar(4) OUTPUT
)
AS
IF ( SELECT COUNT(*) FROM YourLoginTable WHERE LoginName = @LoginName And
Password = @Password ) = 0
BEGIN
SET @IsAuthenticated = 'no'
END
Else
BEGIN
SET @IsAuthenticated = 'yes'
END
Now check the output variable value in the page.
|
|
|
|
|
You know, it would be easier to just return the value in a SELECT statement and use ExecuteScalar() - especially given the level of ability of the OP.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
Thanks, That was a new information for me.
Colin Angus Mackay wrote: especially given the level of ability of the OP.
I am not clear with this, could you please make it clear ?
|
|
|
|
|
Navaneeth. wrote: I am not clear with this, could you please make it clear ?
Given the question that the OP (Original Poster) is asking it is clear that he is a beginner. That way, the answer should be accurate but reduce complexity. Passing data as output parameters in a stored procedure is quite a complex thing to do because of the amount of set up than needs to be done to achieve it.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
I am doing the final touch up of a sample application using ASp .net and sql server 2000..
When i am using the query , i am having a problem in getting the values when calling getdate()
it returns null value....
but actually when i hard core the data it shows the values ....
the sample code of stored proc is as follows...
Error comes here..
select @theId= HqState from HQ as THESTATEID where FromDate=getdate()
plz reply me ......
waiting for ur reply.....
-- modified at 1:59 Friday 15th June, 2007
SAJAN A PILLAI
C#.NET Programmer
TELESOFT INDIA PVT LTD...
BANGALORE
|
|
|
|
|
sajan ss wrote: where FromDate=getdate()
Are you storing the dates accurate to the millisecond? If not then an equals operator on GETDATE() won't work.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
* Reading: Developer Day 5
Never write for other people. Write for yourself, because you have a passion for it. -- Marc Clifton
My website
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
