Storing User Name and Password

[bbarrick]

I working with a team of other students on one of our final projects before we graduate. Our project is to create an application for a Car Dealership and will entail all departments of the dealership. My first step is to create a form that will allow the user to log in and depending on their status, will limit their access to certain information being stored on the database. My question is this: Is it better to store user name, password and other information in a database (Oracle 8), or creating an array in VB. I have 2 months to write this application, so it's kinda urgent. Thanks

[firoz]

it is good practice to store all of the user information in the database itself. with that u can even store access level and other user accessibility level with the user name and password. like if the perticular user can access perticular screen or not.

Firoz

[nishantp]

Couldnt you just put them in an access database and then query it everytime? Cause Access Databases are quite simple in VB. Theres an example on VB-W.

[Stephenb]

Go with the database solution, the array would either be written to a ini file on a PC or hardwired in your code. The database option would allow you to have many different workstations jacked into the data with only one point of update on your logins. With the ini file you would have to update each workstation every time you had a new user.

[Rikk]

I would query the database for the user 'rights' info every time. Also, if you are storing username and password info in a database, you got to encrypt it! Email me for great (and free) encryption code.