Password Casesensitive

Question

question

MohamedRafiN-6400 asked Mar 26, '22 ZhiLv-MSFT edited Mar 28, '22

Password Casesensitive

Sir, I save my password in database is SAAmi@123 but if even enter in small letters saami@123 means its also logging in but it was not correct. please correct in my code pls

if (textBox9.Text != "" && textBox10.Text != "")
{
string connectionString;
MySqlConnection cnn;
connectionString = @"Data Source=localhost;Initial Catalog=testDB;User ID=root;Password=mysql";
cnn = new MySqlConnection(connectionString);
string id = textBox9.Text;
string password = textBox10.Text;
textBox9.Text = "";
textBox10.Text = "";
string query = "select count(*) from login where userid=@userid and password=@password";
using (MySqlCommand cmd = new MySqlCommand(query))
{
cmd.Parameters.AddWithValue("@userid", id);
cmd.Parameters.AddWithValue("@password", password);
cmd.Connection = cnn;
cnn.Open();
cmd.ExecuteNonQuery();
int result = Convert.ToInt32(cmd.ExecuteScalar());
var results = cmd.ExecuteReader();
DialogResult dr = MessageBox.Show("Are you sure to Login now?", "Confirmation", MessageBoxButtons.YesNo);
if (dr == DialogResult.Yes && result > 0)
{
MessageBox.Show("Login Successfully");
cnn.Close();
this.Hide();
Form2 f2 = new Form2();
f2.ShowDialog();
}
else
{
MessageBox.Show("Login Failed");
}
}
}
else
{
MessageBox.Show("Please Enter Correct Login details");
}

dotnet-csharp windows-forms

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-26T10:06:26.003Z

Viorel-1 answered Mar 26, '22 Viorel-1 edited Mar 26, '22

In case of SQL Server:

string query = "select count(*) from login where userid=@userid and password=@password collate Latin1_General_CS_AS";

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2022-03-26T10:33:50.207Z

AgaveJoe answered Mar 26, '22

If this is a web application, MessageBox.Show() only shows on the server. It seems to work in development because your development machine is both the client and the server.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2022-03-26T14:35:32.17Z

karenpayneoregon answered Mar 26, '22

See BINARY operator.

The BINARY operator converts the expression to a binary string (a string that has the binary character set and binary collation). A common use for BINARY is to force a character string comparison to be done byte by byte using numeric byte values rather than character by character.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2022-03-26T15:00:25.083Z

rijwanansari answered Mar 26, '22

Hi @MohamedRafiN-6400

Your code seems okay.

However, Please check collation in database.

Comparisons are case-insensitive if the column uses a collation which ends with _ci (such as the default latin1_general_ci collation) and they are case-sensitive when the column uses a collation which ends with _cs or _bin (such as the utf8_unicode_cs and utf8_bin collations).
By Default, they are case-sensitive. To check, you can use below query.

 mysql> SELECT table_schema, table_name, table_collation 
        FROM information_schema.tables WHERE table_name = `mytable`;

Additionally, you can update collation as shown below:

 -- Change database collation
 ALTER DATABASE `databasename` DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
    
 -- or change table collation
 ALTER TABLE `table` CONVERT TO CHARACTER SET utf8 COLLATE utf8_bin;
    
 -- or change column collation
 ALTER TABLE `table` CHANGE `Value` 
     `Value` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_bin;

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 5 · 2022-03-26T15:21:02.62Z

Bruce-SqlWork answered Mar 26, '22 Bruce-SqlWork edited Mar 26, '22

You really should not be storing the actual passwords. This is a big security risk and would fail any security audit. You should be storing a one way hash of the passwords.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question