How can I confirm a valid UserName & Pass ASP to Oracle DB

[spook007]

I've got an ASP login script that needs to confirm that the username & pass that the user entered is valid on an oracle DB. Does anyone know how I can validate?

 

[Tarwn]

The easiest way I have found to validate a login is to select from the database for that username and password and then check if the recordset is EOF or not. If it is EOF than the username/password combination wasn't in the database and therefore I redirect back to login, if it isn't EOF than they were validated and I continue on with the site. One additional check you should make is against the length of the username and password before attempting to query the db. It is possible for someone to get the source for your form and then create their own page to send oversize fields to your validation script in the hopes to create a buffer overrun.
Hope that helps,
-Tarwn The three most dangerous things in the world are a programmer with a soldering iron, a hardware type with a program patch, and a user with an idea
-computer saying (Wiz Biz - Rick Cook)