error in login code

Subin Thomas

7y1.2k.NET

i have written a login code which was sucessfuly working noe i have changes i need to take the uid and password from different table of same databse i changed the query where the table name i have changed and the field name but it is not working why

string strSelect = "SELECT COUNT(*) FROM [database name].[dbo].[tablename] WHERE ReserveUID = @Username AND LoginPassword = @Password";
SqlConnection con = new SqlConnection(con_Vas);
SqlCommand cmd = new SqlCommand();
cmd.Connection = con;
cmd.CommandType = CommandType.Text;
cmd.CommandText = strSelect;
SqlParameter username = new SqlParameter("@Username", SqlDbType.NVarChar, 50);
username.Value = txtusername.Text.Trim().ToString();
cmd.Parameters.Add(username);
SqlParameter password = new SqlParameter("@Password", SqlDbType.NVarChar, 100);
password.Value = Encrypt(txtpassword.Text.Trim());
cmd.Parameters.Add(password);
con.Open();
int result = (Int32)cmd.ExecuteScalar();
con.Close();
if (result >= 1)
{
Response.Redirect("ProjectDashboard.aspx");
}
else
{
txtusername.Text = "";
txtpassword.Text = "";
Label1.Text = "invalid credential";
}

16 Replies

Know the answer? Post it — somebody with the same question will find it here.

Subin Thomas7y ago
here is my code of encryption
private string Encrypt(string clearText)
        {
            string EncryptionKey = "MAKV2SPBNI99212";
            //string EncryptionKey = "ABCDEFGHIJKLMNOPQRSTUVWXYZ123456789";
            byte[] clearBytes = Encoding.Unicode.GetBytes(clearText);
            using (Aes encryptor = Aes.Create())
            {
                Rfc2898DeriveBytes pdb = new Rfc2898DeriveBytes(EncryptionKey, new byte[] { 0x49, 0x76, 0x61, 0x6e, 0x20, 0x4d, 0x65, 0x64, 0x76, 0x65, 0x64, 0x65, 0x76 });
                encryptor.Key = pdb.GetBytes(32);
                encryptor.IV = pdb.GetBytes(16);
                using (MemoryStream ms = new MemoryStream())
                {
                    using (CryptoStream cs = new CryptoStream(ms, encryptor.CreateEncryptor(), CryptoStreamMode.Write))
                    {
                        cs.Write(clearBytes, 0, clearBytes.Length);
                        cs.Close();
                    }
                    clearText = Convert.ToBase64String(ms.ToArray());
                }
            }
            return clearText;
0
Salman Beg7y ago
Then check your encryption code properly. There must be problem there. Thanks.
+1
Subin Thomas7y ago
i was just checking salman i changed it to encrypt but still ts not working
0
Salman Beg7y ago
Why again you are decrypting the code. When you insert in DB at that encrypt the code. When you are fetching the data then also you need to encrypt. You should use the same encryption code Everytime not different one. Thanks.
+1
Subin Thomas7y ago
Salman Beg in code when i changed from encrypt to decrypt it showed an error of not a valid base 64 string i think the password is not encrypted but some hash some is used which requires valid base 64 string
0
Salman Beg7y ago
It means the encryption value of db and the encryption value of application is not correct. So whenever you are inserting the value in DB check the value properly and also check application encryption value. Thanks.
+1
Subin Thomas7y ago
Salman Beg its working when i hardcode the value in dbi checked i even checked other fields which are not encrypted and its working but when i select encrypted field its not.
0
Salman Beg7y ago
That's what I'm saying to take that username and password and check in SQL server by using the query. Even if you can set some hardcoded value in DB and pass the same from code and check. Thanks.
+1
Subin Thomas7y ago
Salman Beg I think the problem is with the encrypted password thats why its showng invalid
0
Salman Beg7y ago
It's showing invalid password because always it is going to else condition and always result is not satisfying >=1 condition. Take that script and run in SQL server by passing username and password. Even if while debugging in VS also you can check your query by using Immediate window or quick watch. Thanks.
+1
Subin Thomas7y ago
yes Salman Beg in db encrypted password is present i debugged it still havent got any error its just showing invalid password
0
Subin Thomas7y ago
Piyush Pansuriya ihavent got any error. its showing invalid password. the password is encrypted in the database. thats why in code i have used encryption to user input password field
0
Salman Beg7y ago
Hi.
Check is in your db encrypted password is present or normal password. If not working then give normal password in both db as well as from code and check. You can put try catch block and also put debugger in VS.
Thanks.
+1
Piyush Pansuriya7y ago
Did you get any error? Please share the error which you get.
+1
Subin Thomas7y ago
hi puneet
table name and field name i have checked its proper in database password in encrypted so in code i used encryption
0
Puneet Kankar7y ago
Hey subin,

please check your table name and fields names and also make sure you are use encryption properly. Debugg your code line by line.
if you are stored encrypted password to the database comparing both side and also check the length of parameter.

once you check without encryption it is working fine after go can check with encryption.
+1