login procedure (usercode,salt code etc.)

the process for the login script is as follows.

the page is submitted.

- the username is queried against the database, to get the original password and salt code.

the inputted password by the user is encrypted using the form inoput value and the salt code.


then the database password is compared with the inputed value that has been encrypted. if the match the user has entered the correct password.

so we update the last login time, update the user_code with a new one, to prevent being logged in else where. and put the user_codew within a cookie.

then within the common.asp file the user_code is read in, and queried agaist the database to get the users details and the detals are then used to display , username etc.

Now i understand the salt code...

The last thing is how we generate the usercode?
The usercode is changed sometimes or its produced once and its the same forever???

if we change it sometimes when & why do we need?



i will be very appreciated if u answer my detailed question...

Thanks

Burak

thanks a lot that was exactly what i need