Web Wiz - Green Windows Web Hosting
Web Wiz Homepage Search Web Wiz

  New Posts New Posts RSS Feed - The Login Process??
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

The Login Process??
 Post Reply Post Reply Page  12>
Author
  Topic Search Topic Search  Topic Options Topic Options
__n3o__ View Drop Down
Groupie
Groupie
Avatar

Joined: 08 November 2005
Location: United Kingdom
Status: Offline
Points: 135 		Post Options Post Options   Thanks (0) Thanks(0)   Quote __n3o__ Quote  Post ReplyReply Direct Link To This Post Topic: The Login Process??
    Posted: 27 January 2007 at 9:50am
Hi..  I am currently building an ASP.NET portal for a website I run, we currently have WWF and have alot of members registered...

I am trying to create a login page for my portal, which is no problem normally but I have to use the WWF username & password fields as I have alot of members who will not want to have to sign up again...

I have looked at the login function that WWF uses and still cannot get the password to match even though I am using the same function (I think)...

I am doing the following...

Checking the username against the DataBase...  Then taking the password entered into the password text box and..

1.) Append the 'Salt' DB value to the password entered -- strPassword = strPassword & Salt

2.) Then I run strPassword through the HashEnCode -- strPassword = HashEncode(strPassword)

Thats it? Then I'm checking the result against the DB? ...  Am I missing something?
Back to Top
__n3o__ View Drop Down
Groupie
Groupie
Avatar

Joined: 08 November 2005
Location: United Kingdom
Status: Offline
Points: 135 		Post Options Post Options   Thanks (0) Thanks(0)   Quote __n3o__ Quote  Post ReplyReply Direct Link To This Post Posted: 27 January 2007 at 9:56am
To be honest I would prefer to be able to unencode the passwords - I then use my own encoding for the portal db...  Anyone have a script to re-encode the passwords in the DB?? - But if not any help very much appreciated... Thanks

Edited by __n3o__ - 27 January 2007 at 10:07am
Back to Top
__n3o__ View Drop Down
Groupie
Groupie
Avatar

Joined: 08 November 2005
Location: United Kingdom
Status: Offline
Points: 135 		Post Options Post Options   Thanks (0) Thanks(0)   Quote __n3o__ Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2007 at 7:36pm
*BUMP* Disapprove
Back to Top
dfrancis View Drop Down
Senior Member
Senior Member


Joined: 16 March 2005
Location: United States
Status: Offline
Points: 442 		Post Options Post Options   Thanks (0) Thanks(0)   Quote dfrancis Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2007 at 9:38pm
I've done a good amount of work with the salt/password for a classic asp system. Have you looked at the API in the latest version of WWF?
 
Maybe we can work together because I'm making the transition to dot net myself.
“If you want things to be different, you must be willing to do different things!”David Francis
Back to Top
dfrancis View Drop Down
Senior Member
Senior Member


Joined: 16 March 2005
Location: United States
Status: Offline
Points: 442 		Post Options Post Options   Thanks (0) Thanks(0)   Quote dfrancis Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2007 at 9:43pm
Originally posted by __n3o__ __n3o__ wrote:

To be honest I would prefer to be able to unencode the passwords - I then use my own encoding for the portal db...  Anyone have a script to re-encode the passwords in the DB?? - But if not any help very much appreciated... Thanks
 
It's supposed to be a one way hash... though conceptually, since you know the salt, you would think that getting the unencoded string would be no trouble. The thing is, you need both parts to read the string.
 
Well let's see...
 
str+salt = encoded password.
salt/encoded "should" = str
 
Not sure if it's possible though.
 
 
 
“If you want things to be different, you must be willing to do different things!”David Francis
Back to Top
__n3o__ View Drop Down
Groupie
Groupie
Avatar

Joined: 08 November 2005
Location: United Kingdom
Status: Offline
Points: 135 		Post Options Post Options   Thanks (0) Thanks(0)   Quote __n3o__ Quote  Post ReplyReply Direct Link To This Post Posted: 29 January 2007 at 6:54am
Hi David - Thanks for answering..

I have had a look at the API, but I have my own sessions and cookies to use - And I thought it would be more work re-writing that, than just getting the Hashway1 page to work considering 99% of it I can just take and use in .NET..

I did have one thought though, in one of the functions on the hashway1 page (Function IntToBinary) it uses the 'Round' VBScript function...  This has now been killed in .NET 2.0 and I have to use a different function that either rounds up or down??  So I replaced the following as shown... Do you think this might be causing the problem? I have rounded up using the System.Math.Ceiling

Original Bit of Function IntToBinary

intNew = Round(CDbl(dblNew) - 0.1, 0)


.NET version

intNew = System.Math.Ceiling(CDbl(dblNew))


Any help appreciated, and more than happy to work together - Thanks
Back to Top
dj air View Drop Down
Senior Member
Senior Member
Avatar

Joined: 05 April 2002
Location: United Kingdom
Status: Offline
Points: 3627 		Post Options Post Options   Thanks (0) Thanks(0)   Quote dj air Quote  Post ReplyReply Direct Link To This Post Posted: 29 January 2007 at 1:31pm
strPassword = request.form.("Password")
strSalt = (db value)
strDBPassword = (DB Value)
blnPasswordCorrect  = False
 
StrWholePassword = strPassword & strSalt
 
strEncryptedPassword = HashEncode(strWholePassword)
 
 
if strDBPassword = strEncryptedPassword then blnPasswordCorrect = True
 
 
if blnPasswordCorrect  is correct then password cleared
if blnPasswordCorrect  is False then password Error
 
 
in theory that idea should work


Edited by dj air - 29 January 2007 at 1:34pm
Back to Top
__n3o__ View Drop Down
Groupie
Groupie
Avatar

Joined: 08 November 2005
Location: United Kingdom
Status: Offline
Points: 135 		Post Options Post Options   Thanks (0) Thanks(0)   Quote __n3o__ Quote  Post ReplyReply Direct Link To This Post Posted: 29 January 2007 at 1:49pm
I'll double check tonight aaron but I'm pretty sure thats more or less what I'm doing Confused....  Thanks for posting that up fella Wink
Back to Top
 Post Reply Post Reply Page  12>

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.

Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.