Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsVB SyntaxEnterprise DevelopmentDatabase AccessControlsCOMWin APICrystal ReportDeploymentGeneralGeneral 2
Related Topics
VB.NET / ASP.NETMS SQL ServerMS AccessOther Database ProductsMore Topics ...

VB Forum / Database Access / November 2004



Tip: Looking for answers? Try searching our database.

Creating a Login Form in VB6

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
DavidM - 24 Nov 2004 22:36 GMT
Hello --

I have a Login form that I have written using VB6.  Everything works, but I
do have a couple opportunities, if you will.

Currently, I only have a Username and Password text box.  When the user
presses the OK button, I pass the username/password textbox values to a
subroutine.

The subroutine attempts to open an ADO connection using the supplied values.

All this works, however, I need to also include the Server= and Database=
options along with the User ID= and Password= options.

Therefore, I need to include a Server and Database dropdown on my login
form.

Now, I could go very basic and just have a textbox and, if they know exactly
what they want, they can simply key it in and life will be good.  However,
I'm thinking ahead and would like to code it like most login forms where....

1) I can enter an IP address/Name in the text box, or browser for a server.

2) As soon as I enter a Servername/Username/Password, and before I hit OK,
the "Database" listbox will populate with a list of databases to the server
the user has access to.

Does anyone have any code they can share for doing this?

I assume I'm going to have to use something else other than ADO...  like
DMO.

If I do use DMO, I assume my login method I'm using today will change.  I'd
first use DMO to authenicate... and if that works, I'd then open a database
connection using ADO??

Finally, what does this do for deploying my application.  I'm currently in
the process of using InnoSetup for my project.  Do/can I include these
additional files or what?

Any help would be appreciated.
Bob Butler - 25 Nov 2004 01:36 GMT
> Hello --
>
[quoted text clipped - 21 lines]
> 1) I can enter an IP address/Name in the text box, or browser for a
> server.

take a look at
http://groups.google.com/groups?hl=en&lr=&threadm=2mcqdmFlgfc3U1%40uni-berlin.de
&rnum=4&prev=/groups%3Fq%3Dbrowse%2Bnetwork%2Bsql%2Bservers%26hl%3Den%26btnG%3DG
oogle%2BSearch

and the followup message
http://groups.google.com/groups?hl=en&lr=&threadm=2mcqdmFlgfc3U1%40uni-berlin.de
&rnum=4&prev=/groups%3Fq%3Dbrowse%2Bnetwork%2Bsql%2Bservers%26hl%3Den%26btnG%3DG
oogle%2BSearch


> 2) As soon as I enter a Servername/Username/Password, and before I
> hit OK, the "Database" listbox will populate with a list of databases
> to the server the user has access to.
>
> Does anyone have any code they can share for doing this?

try connecting with the info you have and running this query
select catalog_name from INFORMATION_SCHEMA.SCHEMATA

Signature

Reply to the group so all can participate
VB.Net... just say "No"

NEWS - 27 Nov 2004 16:54 GMT
I have a related question...

I also have a login form which I take the ID and password input by the user
and uses ADO code to validate it on an SQL server database across the
internet.

My VB code contains the IP address of the SQL server database, the database
name, and the user ID and password to connect to the SQL server database.
Only then do I look up what the user entered.

What I am NOT happy about is that I have the SQL server ID AND password
hardcoded in the VB program. This does not seem very secure. If anyone looks
inside the VB program, they will see it????? Also the ID & password will be
sent across the interenet everytime I do a connection to the database ??

Any suggestions abot how to make this more secure please.

thanks

Garry

> Hello --
>
[quoted text clipped - 37 lines]
>
> Any help would be appreciated.
DavidM - 27 Nov 2004 17:34 GMT
Sounds like you need to add a textbox for the user to enter a "Server name
or TCP/IP address".

Regarding password being sent across Internet -- it is sent clear-text and
is weakly encrypted using XOR.  In one of our applications at work last
year, someone forgot the "SA" password (Don't get me started about SA) and
the application had it hardcoded.

The easiest way for me to figure out what the password was is to sniff
network during a logon session.  I then decrypted password and cha-ching.  I
was in.

I'm not sure if you can use it, but you can try NT Authenication instead of
SQL.  That will at least make it a bit more secure without a password going
over the wire.

>I have a related question...
>
[quoted text clipped - 73 lines]
>>
>> Any help would be appreciated.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.