Printable View
HI,
I have created a simple login page with basic requirements with the following example https://krazytech.com/programs/a-log...design-pattern. I have stored the registered user details in database. As of now I have stored their password in plain text. But I want to encrypt the password and then store it in database. I am using java and jsp for views.
Search google for "java encrypt decrypt".
I followed the post [stackoverflow.com/questions/47537908/…. But when I tried login with the password i am getting Invalid user credentials,as the password entered in db looks like SHA2(CONCAT('gayuranimini', 78622100), 256). I tried entering 78622100 alone in db and when tried login with gayuranimini i am getting Invalid user credentials error. when I tried entering with 78622100 the login was successful. Please tell me where I am wrong.
When registering i want the encrypted password to insert into database. And when login i want the original password.
The above code is for login and there entering the password checks the database. So the password doesn't get match. How to match the password?Quote:
userNameDB = resultSet.getString("userName"); //fetch the values present in database
passwordDB = resultSet.getString("password");
if(userName.equals(userNameDB) && password.equals(passwordDB))
{
return "SUCCESS"; ////If the user entered values are already present in database, which means user has already registered so I will return SUCCESS message.
}
Here is what you need to do:
1) encrypt the incoming password
2) store the username and encrypted password into the database
When the user logs on,...
3) Encrypt the passed-in password
4) Use the passed-in username to retrieve the user record from the database
5) Compare the encrypted passed from step 3) with the encrypted password value in the user record.
6) If the values match, they are logged on
Note: you must use the same algorithm/seed value for the encrypt/decrypt operations.
I am using the following code for encryption at my registration side.
How will I decrypt in the login side? Please help me.Quote:
MessageDigest alg = MessageDigest.getInstance("MD5");
alg.reset();
alg.update(password.getBytes());
byte[] digest = alg.digest();
StringBuffer hashedpasswd = new StringBuffer();
String hx;
for (int i=0;i<digest.length;i++){
hx = Integer.toHexString(0xFF & digest[i]);
//0x03 is equal to 0x3, but we need 0x03 for our md5sum
if(hx.length() == 1){hx = "0" + hx;}
hashedpasswd.append(hx);
}
No need to decrypt. See step 5).
Thanks for your suggestion. Now it works fine. I just added the same code in login page and matches the password.
Great.