https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sun, 12 Apr 2026 16:05:46 +0000 Tue, 22 Mar 2005 12:37:22 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=14334 https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79537.html#79537 Author: netsonic
Subject: 14334
Posted: 22 March 2005 at 12:37pm

thanks a lot that was exactly what i need]]> Tue, 22 Mar 2005 12:37:22 +0000 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79537.html#79537 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79483.html#79483 Author: dj air
Subject: 14334
Posted: 21 March 2005 at 7:33pm

the user code is generated/ replaced quiute a few times.

so to answer a couple of your questions its created and then sometimes updated.

the user code consists of the username followed by a random value this makes the user_code unique.


this is gone often to prevent security holes.

on login it is changed to make sure you can only access the forum fromthat one location as the new user_code will be no good that is storedon other machines.

its also updated during an profile update. for a simular reason to the above.

also during activation of the account if email activation is enabled.

also when a username is changed by an administrator

also there maybe a few other places
]]> Mon, 21 Mar 2005 19:33:25 +0000 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79483.html#79483 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79469.html#79469 Author: netsonic
Subject: 14334
Posted: 21 March 2005 at 5:11pm

Now i understand the salt code...

The last thing is how we generate the usercode?
The usercode is changed sometimes or its produced once and its the same forever???

if we change it sometimes when & why do we need?



i will be very appreciated if u answer my detailed question...

Thanks

Burak
]]> Mon, 21 Mar 2005 17:11:37 +0000 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79469.html#79469 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79333.html#79333 Author: netsonic
Subject: 14334
Posted: 20 March 2005 at 11:46am

thanks a lot for the answer...

but i didnt understand the salt code...
what is salt code for?why do we need this?and how its produced...its produced from the username??
]]> Sun, 20 Mar 2005 11:46:16 +0000 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79333.html#79333 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79328.html#79328 Author: dj air
Subject: 14334
Posted: 20 March 2005 at 11:06am

the process for the login script is as follows.

the page is submitted.

- the username is queried against the database, to get the original password and salt code.

the inputted password by the user is encrypted using the form inoput value and the salt code.


then the database password is compared with the inputed value that hasbeen encrypted. if the match the user has entered the correct password.

so we update the last login time, update the user_code with a new one,to prevent being logged in else where. and put the user_codew within acookie.

then within the common.asp file the user_code is read in, and queriedagaist the database to get the users details and the detals are thenused to display , username etc.
]]> Sun, 20 Mar 2005 11:06:23 +0000 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79328.html#79328 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79324.html#79324 Author: netsonic
Subject: 14334
Posted: 20 March 2005 at 10:44am

Hi all

i want to learn how the forums login procedure functioning?

there is a usercode salt code and a encrypted password...
when we login with username and password what does the script do with usercode,salt code and encrypted password...


i am planning to make a site with jsp and want to do a similar login type with webwiz...

is there any document or something that i can understand the procedure???can anyone help mee

thanks

Burak
]]> Sun, 20 Mar 2005 10:44:50 +0000 https://forums.webwiz.net/login-procedure-usercodesalt-code-etc_topic14334_post79324.html#79324