FAQ for the Login & Password Sample

By John Peterson

Both the username and password are case-sensitive. How can I change it so they are not?

Let me start by saying that I recommend that you use case-sensitive usernames and passwords. Case-sensitivity adds an additional level of complexity and can make it harder for unauthorized users to guess a user's credentials. That being said, if you must make your usernames and/or passwords case-insensitive, it's actually quite easy to do.

All you need to do is convert both the entered value and the stored value to the same case before you compare them. I usually use LCase to make them both lower case, but using UCase to make them upper case works exactly the same way.

As an example, here's the original line from the classic ASP version of the sample.

If Request.Form("login") = "Guest" AND Request.Form("password") = "Guest" Then

By simply adding a few calls to LCase, the code below totally ignores the cases of the characters entered.

If LCase(Request.Form("login")) = LCase("Guest") AND LCase(Request.Form("password")) = LCase("Guest") Then

If you're going to do this, I recommend you only switch to the case-insensitive values in the comparison code and not in the code that retrieves or stores the values. Storing the username and password exactly as the user entered them allows you to easily move to a case-sensitive routine at some future date should the need arise.

How do I protect a large number of files?

If you're trying to protect multiple files based on the same criteria, the best way to do it is to create one protection script and include it in all the files by using a server side include. If you include it into each file you want to protect, then any changes you make to it will automatically go into effect for all the files. It makes managing things much easier.

How do I secure files that are not .asp?

This sample was designed to work with .asp files. If you need to secure other types of files you should look into using NT permissions or a third party component.

Was your question not answered above?

Please note: This form is only for submitting questions about the sample for us to consider including in the FAQ. If we feel the question merits inclusion, we will include it along with a reply. We will not respond to your email individually.



About the Author

From ASP101

Articles originally posted on ASP101.com

Comments

  • There are no comments yet. Be the first to comment!

Leave a Comment
  • Your email address will not be published. All fields are required.

Top White Papers and Webcasts

  • Live Event Date: May 6, 2015 @ 1:00 p.m. ET / 10:00 a.m. PT Where are you in your plans to adopt Disaster Recovery-as-a-Service? Are you just getting started? Fighting an uphill battle with management? At Cisco, Zerto and iland, we've seen it all – from the early adopters who excitedly rushed to implement DRaaS with us nine years ago to the IT folks dragging their business leaders into the future. With our years of experience, we've learned there are six types of DRaaS leaders – but which type …

  • On-demand Event Event Date: March 19, 2015 The 2015 Enterprise Mobile Application Survey asked 250 mobility professionals what their biggest mobile challenges are, how many employees they are equipping with mobile apps, and their methods for driving value with mobility. Join Dan Woods, Editor and CTO of CITO Research, and Alan Murray, SVP of Products at Apperian, as they break down the results of this survey and discuss how enterprises are using mobile application management and private app stores to …

Most Popular Programming Stories

More for Developers

RSS Feeds

Thanks for your registration, follow us on our social networks to keep up-to-date