verifying username and password by calling stored procedure from c#.net

Question

0.00/5 (No votes)

See more:

Hi,

I writes a Stored Procedure to check username and password that as follows:

SQL

create procedure Chk_UnamePWD
@UName varchar,@PWD varchar
as
begin
    select count(*) from tblCustomerVendorInfo where CVUserName=@UName and CVPassword=@PWD;
end

exec Chk_UnamePWD 'BBB','BBB'

Eventhough the given username and password is correct Stored Procedure is returns only 0(Zero).

Please advise me to solve this.

Thanks

K Uday

Posted 17-Aug-11 23:27pm

udaysimha

Add a Solution

Comments

barneyman 18-Aug-11 6:00am

whichever solution you go with, I'd advise you not to store the actual password, store an MD5 of the salted password

3 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Mahendra.p25 · Answer 1 · 2011-08-17T23:38:00

Solution 3

try to find Out in the following Way

SQL

Declare @Result int
if exists(select * from product  where name = 'product1')
begin
set @Result=1
select @result
end

else
begin
set @Result=0
select @Result
end

Posted 17-Aug-11 23:38pm

Mahendra.p25

Herman<T>.Instance · Answer 2 · 2011-08-17T23:34:00

test the query with the next partial queries:
1: select count(*) from tblCustomerVendorInfo;
do you get all values from the table?

2: select count(*) from tblCustomerVendorInfo where CVUserName=@UName
do you get the single user?

in this wau you can see if the basic query or the username is wrong. If both cases return the expected values than the problem might be your password part.
what of you check select * on the second test query. Do you see the details and does the given password matches the one in the database?

Prerak Patel · Answer 3 · 2011-08-17T23:35:00

Solution 2

Try using select count(*) from tblCustomerVendorInfo where CVUserName='BBB' and CVPassword='BBB'; in management studio and see if it returns any row. May be there are some leading or trailing spaces in the value.

Posted 17-Aug-11 23:35pm

Prerak Patel