Question

Am developing a Web application using ASP.net, in the login page of my application am checking the given username and password with the value in the database, actually my username is "Admin" and password is "Password" but if I give "admin" as username and "password" as password, it accepts the username and password.

I want the password should be in case sensitive. When I went through the internet I got some points like changing the Collation property of CI(CaseInsensitive) to CS(Case Sensitive)…..I think this is for the whole database….I dont like to set this for the whole database, I like to check only for the username and password..

Is it possible, can anyone help me here…

am trying like

DataObject.Entities dataEntities=new DataObject.Entities();
DataObject.Users user=dataEntities.Users.Where(u=>u.UserName==UserName && u.Password==Password);

if(user != null)
// link to home page.
else
//login failed.

Answer 1

It sounds like you’re doing something terrible wrong. If you used a decent cryptographic hash function for your passwords, this wouldn’t be a problem at all.

When you store your passwords, you should hash them and save the hash to the database – not the actual password.