Question

I have a coldfusion application running right now with a login that sends a query to the database looking for a row with the same username and password as what was entered into the form.

Curently, it is completely non-case sensitive. However, I would like to add case sensitivity to the password field, so that users have to have the exact password. Is there a way to do a case sensitive IF statement in coldfusion?

Answer 1

You can hash() both values and compare the hashes.

<cfif Hash( DBPassword ) EQ Hash( SubmittedPassword )>
      <!--- Login Code --->
 </cfif>

Also, you shouldn’t be storing passwords as plain-text in the databases as is.