CODEWITHSUNDEEP
asp.netsql-server
Wondering
Wondering

Reputation: 5096

How to check case sensitive password in sql server08

In my application I am sending password to database,lets say my Password is PassworD123. Now this is giving me proper value ,but when i am using password123..its also giving me the proper value.So how to chaeck for case sensitive data in SQL server. Any demo code will help. Thanks.

Upvotes: 1

Views: 7028

Answers (4)

Gordian Yuan
Gordian Yuan

Reputation: 5070

You can use COLLATE clause in your T-SQL statement.

Ex.

SELECT * FROM dbo.TableName WHERE Password = @ password COLLATE SQL_Latin1_General_CP1_CS_AS

Upvotes: 2

TML
TML

Reputation: 12976

Well, the short answer is to use a case-sensitive collation - the longer answer is don't store plaintext passwords in your database!

Upvotes: 2

Alterlife
Alterlife

Reputation: 6625

The immediate answer to your query is here: http://web.archive.org/web/20080811231016/http://sqlserver2000.databases.aspfaq.com:80/how-can-i-make-my-sql-queries-case-sensitive.html

However I think your approach to storing / comparing passwords is a bit wrong. You should not be storing the password directly in the database. At-least MD5 it or something.

Upvotes: 2

Angel.King.47
Angel.King.47

Reputation: 8004

Why not use encryption to store the passwords in the database such as md5 because they will return different hashed versions for example

Md5 of password123 = 482c811da5d5b4bc6d497ffa98491e38

Md5 of PassworD123 = bbac8ba35cdef1b1e6c40f82ff8002ea

and when you compare them 2 they are clearly different.

I think you are using ASP therefore i dont know if it has an md5() function built in but php does have it. Another thing you should know is that if you are storing passwords in a database its better to store them using some sort of encryption that cannot be reversed

Upvotes: 5

Related Questions