How to Store Username and Password

[BrailleSchool]

the best way to do this is to store the usernames and passwords into a database, then connect your vb6 app to the database. there are many threads on this already.

[zynder]

You can create a database from Microsoft Access. Put two fields like "username" and "password".


Put this to your module

Option Explicit
Public cn As ADODB.Connection
 
 
'connection string from Microsoft Access
Public Sub OpenConnection()
 
Set cn = New ADODB.Connection
With cn
    .ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & App.Path & "\yourdbase.mdb;Persist Security Info=False"
    .CommandTimeout = 0
    .CursorLocation = adUseClient
    .Open
End With
End Sub

Put this to your form

Public rs As ADODB.Recordset
 
 
Private Sub Form_Load()
    OpenConnection
End Sub
 
Private Sub Command1_Click()
Set rs = New ADODB.Recordset
 
   strsearch = "SELECT username FROM tablename WHERE username like '" & Text1.Text & "'"
    rs.Open strsearch, adoc, adOpenDynamic, adLockOptimistic
    rs.Requery
 
   If rs.RecordCount >= 1 Then
      'put your conditions here
   else
      'your code here
   end if
 
 
End Sub

This is just a sample. you can find much better codes out here.

[CVMichael]

See this:
VB6 - Example on how to make a Login where password is stored hashed in Database

[wryan_garner4]

Thanks for the great info but i dont have microsoft access so it doesnt help me much. i also dont know how to link the two programs together to get the database from one to the other. if it is possible i would like to have the vb program self-contained. i would like the username and password saved all within the vb program.

[CVMichael]

i would like the username and password saved all within the vb program.

I'm not sure what you mean by that ?

And about the link I posted, that example is using Access, but you can easily change it to whatever database you want. Just change the Connection String in the LoadDatabase function, and the SQL statements to match the database SQL type... though I think the SQL statements should be the same in any database...

Just remember that if the example is made for Access, it does not mean that this works ONLY in Access...

[muhannad]

the data entered in the user name and password fields must be linked to a database so you can retrieve them later for validation.. add an adodc control and cofigure connection settings.

[MartinLiss]

You don't need to store them in a database although there's noting wrong with that. Another good way is to store the data in the Registry. If you store it there you should encrypt the password and also possibly the username.

[insta]

Thanks for the great info but i dont have microsoft access so it doesnt help me much. i also dont know how to link the two programs together to get the database from one to the other. if it is possible i would like to have the vb program self-contained. i would like the username and password saved all within the vb program.

I understand what you mean. You need to be very careful doing this, because anyone can trivially read the username and password back out of the file. However, if you need to store this, you can use a CRC32 hash to obfuscate the password. What you would do is generate a CRC32 hash of the password ahead of time, and store that in a module. At runtime, DON'T compare password to password, but rather hash the password that the user types in, and compare that to your stored hash.

It's not foolproof, in that specially crafted strings can generate the same CRC32, but it's significantly more complex to reverse engineer.

[CVMichael]

I understand what you mean. You need to be very careful doing this, because anyone can trivially read the username and password back out of the file. However, if you need to store this, you can use a CRC32 hash to obfuscate the password. What you would do is generate a CRC32 hash of the password ahead of time, and store that in a module. At runtime, DON'T compare password to password, but rather hash the password that the user types in, and compare that to your stored hash.

It's not foolproof, in that specially crafted strings can generate the same CRC32, but it's significantly more complex to reverse engineer.

That is exacly what I posted in Post #4, except I'm using MD5 to hash wich is 128 Bit

[insta]

That is exacly what I posted in Post #4, except I'm using MD5 to hash wich is 128 Bit

Apologies ... I was trying to provide a database-less solution. Although I guess I didn't actually include any code.