test if username exists

[tinapa]

hi guys, do you know how to test if a username is already existing in the database? i am using asp, sql server, dreamweaver.


sampletable1

id username password
-- --------- ---------
1 username1 password1
2 username2 password2
.
.
.

or do you have any sample codes similar to this?

thnx

 

[cr84net2]

You could try something like this:

'setup connection to db


'create record set

Set rs = Server.CreateObject("ADODB.Recordset")
sql= "Select username from users where username=" & newusername

If NOT rs.EOF Then
Response.write " Please choose another username."

Else

'Add recored to db

End If
'Clean up

 

[cr84net2]

or this:

'setup connection to db we'll use conn as an example


sql= "Select username from sampletable1 where username=" & newusername

set rs= conn.execute(sql)

If NOT rs.EOF Then
Response.write " Please choose another username."

Else

'Add recored to db

End If
'Clean up

Be sure to validate user input to check for injection or cross site scripting before using the newusername parameter.

 

[tinapa]

cr84net2 thnx.

i will look into that

 

[gbaughma]

Yeah... pretty basic stuff....

But you *DEFINATELY* want to sterilize the input before bouncing it off of your user database like that.....

.... or use a stored procedure.



Just my 2¢

"What the captain doesn't realize is that we've secretly replaced his Dilithium Crystals with new Folger's Crystals."

--Greg

http://parallel.tzo.com

 

[SimonEireconsulting]

stored procedure is definitely the way to do DB access:

1. call the stored procedure that you create passing through the Username as a parameter.

2. in the stored procedure do:
IF EXISTS (SELECT UserID FROM tUsers WHERE Username = @Username)
RETURN -1
ELSE
RETURN 0

3. in your asp you can then get the return parameter from the stored procedure and do what you want.

However, you should also think about letting the stored procedure do all the "business" stuff, so that you don't have to keep going back and forth between asp and db, for performance

 

[tinapa]

thanks SimonEireconsulting, i will look into that

 

[SimonEireconsulting]

let me know if you need more on creating the sp and calling it from ASP