Making Login Restriction

[bloodsside14]

Hi guy's i am using vb6 and sql server 2000 and i create my login form and already connected to the sql i am wondering how to make some restriction on login. Sample when i login Admin i can access everything in form2 but when i login kobe some buttons or textbox i can't access. How could i do that? Need a big help guy's

[Siddharth Rout]

Define a Global Boolean variable in your module and set them to true when there is an admin login and set them to false when user logs in. Depending upon that variable enable/disable you buttons/text box

[bloodsside14]

Define a Global Boolean variable in your module and set them to true when there is an admin login and set them to false when user logs in. Depending upon that variable enable/disable you buttons/text box

How to do that sir? I have no idea sorry for that

[TysonLPrice]

I suggest setting up database roles for access and check those instead of hardcoding IDs.

[akhileshbc]

Hi...

Check the example attached....

[TysonLPrice]

It's more work and some research but if this is an application of any substance and will reside in a commercial production environment learn to use DB roles versus hardcoding IDs as in the example by akhileshbc. If it is something small and just controled by you the example is fine.

[akhileshbc]

@TysonLPrice: Can you give me a small example description regarding DB roles ?

Thanks..

[bloodsside14]

Hi...

Check the example attached....

Thank's for the info sir but what if my user and password are stored in my datatabase and not on my form. How to restrict it? Same as you do?

[Siddharth Rout]

How to do that sir? I have no idea sorry for that

Ok. Here is a very basic example. Amend it as per your requirements

[dilettante]

It is generally more beneficial to post ZIP files. RAR support isn't available in Windows and many users don't see a reason to pay for and install it.

[bloodsside14]

Ok. Here is a very basic example. Amend it as per your requirements

inside the list box i will get it the content on the sql?

[TysonLPrice]

@TysonLPrice: Can you give me a small example description regarding DB roles ?

Thanks..

Got to work right now

I'll get back to you...

[Siddharth Rout]

@BS: You you can

[akhileshbc]

Thank's for the info sir but what if my user and password are stored in my datatabase and not on my form. How to restrict it? Same as you do?

In the login form, try the username and password checking using data from your database. Then, assign the user role based on that user.

@TysonLPrice: That's ok. I'll wait

[bloodsside14]

In the login form, try the username and password checking using data from your database. Then, assign the user role based on that user.

@TysonLPrice: That's ok. I'll wait

I cant get what you say sir please clarify me what to do. sorry for that

[akhileshbc]

I cant get what you say sir please clarify me what to do. sorry for that

It will be something like this (for example):

Option Explicit

Private Sub cmdOK_Click()
    '~~~ Add reference to Microsoft ActiveX Data Objects 2.x Library
    '~~~ We are going to check the database for the entered username and password. You need to make the necessary changes to suit your needs
    Dim cn As ADODB.Connection
    Dim rs As ADODB.Recordset
    Set cn = New ADODB.Connection
    cn.ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0;" & _
      "Data Source= " & App.Path & "\database.mdb;Persist Security Info=False;Jet OLEDB:Database Password=myDBpassword;"
    cn.Open
    Set rs = New ADODB.Recordset
    rs.Open "SELECT * FROM all_users WHERE user_name = '" & Trim$(txtUserName.Text) & "' AND password = '" & txtPassword.Text & "'", cn, adOpenForwardOnly, adLockReadOnly
    
    If rs.EOF = False Then
        Select Case LCase$(txtUserName.Text)
            Case "admin"
                myUser = user_Admin
                Form1.Show
                Unload frmLogin
                Exit Sub
            Case "guest"
                myUser = user_Guest
                Form1.Show
                Unload frmLogin
                Exit Sub
            Case "normal"
                myUser = user_Normal
                Form1.Show
                Unload frmLogin
                Exit Sub
        End Select
    End If
    
    MsgBox "Invalid Password, try again!", , "Login"
    txtPassword.SetFocus
    SendKeys "{Home}+{End}"

End Sub

You need to read the articles and tutorials in our Database Development FAQ section to know more about database manipulation.

Good luck...

[bloodsside14]

why your getting this?

	
	
"Data Source= " & App.Path & "\database.mdb;Persist Security Info=False;Jet OLEDB:Database Password=myDBpassword;"

[Spoo]

It is generally more beneficial to post ZIP files. RAR support isn't available in Windows and many users don't see a reason to pay for and install it.

Dilettante

I agree.

Spoo

[Siddharth Rout]

@dilettante: Uploaded a .Zip file

[Spoo]

Kool

Thnx

Spoo

[akhileshbc]

why your getting this?

	
	
"Data Source= " & App.Path & "\database.mdb;Persist Security Info=False;Jet OLEDB:Database Password=myDBpassword;"

Read the articles in here: http://www.vbforums.com/showthread.php?t=337051#ado, particularly this tutorial: http://www.vbforums.com/showthread.php?t=551154...

[bloodsside14]

Your using there a MS Access right?

[bloodsside14]

Private Sub cmbUser_Click()
    If cmbUser.ListCount = 0 Then Exit Sub
    Me.cmdDatabaseFiles.Enabled = True
    Me.cmdFilesDatabase.Enabled = True
    Me.cmdChkProfile.Enabled = True
    
End Sub
Private Sub getUser()
 
    On Error GoTo ErrHandler
    set_rec_getData "SELECT username FROM tblUser", rs, cn
   
 
    Do While Not rs.EOF
        Me.cmbUser.AddItem Trim$(rs("username"))
        rs.MoveNext
    Loop
        
    
    If cmbUser.ListCount <> 0 Then cmbUser.ListIndex = 0
    
    rs.Close
    Set rs = Nothing
 
Exit Sub
ErrHandler:
    MsgBox "Error: " & Err.Description & vbNewLine & "Error Number: " & Err.Number, vbCritical
End Sub

I am using this codes to show the values in combo box but when i run it nothing happens i did not get anything to the database.

[akhileshbc]

Your using there a MS Access right?

Yes..

I am using this codes to show the values in combo box but when i run it nothing happens i did not get anything to the database.

Then, you have to provide us more details for checking that issue. Like the sub that deals with the database (set_rec_getData) and other things.
....

[bloodsside14]

i don't have any sub sir

[akhileshbc]

i don't have any sub sir

Ok. Where's the connection ? Have you dealt with database before ?
Does it show any errors ? Did you checked your database - i mean, does it have any records ?

[bloodsside14]

there is a record there for sure and set a primary key. Not showing any errors, run smoothly but no records in combo box.

[bloodsside14]

Now i can connect to my datatabse using this codes

Dim rs As New ADODB.Recordset
If Trim(Combo1.Text) <> "" And Trim(txtpass.Text) <> "" Then
If cnn.State <> adStateOpen Then cnn.Open
rs.CursorLocation = adUseClient
rs.Open "SELECT * FROM tblUser WHERE username='" & Trim(Combo1.Text) & "' AND password='" & Trim(txtpass.Text) & "'", cnn, adOpenStatic, adLockReadOnly
 
If Not rs.EOF Then
Combo1.Enabled = False
        txtpass.Enabled = False
        Label1.Enabled = False
        Label2.Enabled = False
        cmdOK.Enabled = False
        cmdCancel.Enabled = False
        
        Form2.Show
        Form1.Hide
 
 Else
MsgBox "The username and password that you provided" & vbCrLf & "are not found in the database.", vbApplicationModal + vbInformation, _
        "Invalid Admin"
        Combo1.Text = ""
        txtpass.Text = ""
        Combo1.SetFocus
End If
rs.Close
Set rs = Nothing
cnn.Close
Else
MsgBox "Required admin details are missing.", vbApplicationModal + vbExclamation, "Missing Information"
Combo1.SetFocus
End If
End Sub

and this is my connection to dbase

Option Explicit
Public cnn As New ADODB.Connection
Public strConnection As String
Public strAccess As String
 
 
 
strConnection = "Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security Info=False;Initial Catalog=MIAA;Data Source=PAULO\MONTEALEGRE"
 
cnn.ConnectionString = strConnection
cnn.Open
Dim rs As New ADODB.Recordset
If cnn.State <> adStateOpen Then cnn.Open
rs.Open "SELECT username FROM tblUser", cnn, adOpenStatic, adLockReadOnly
If Not rs.EOF Then
    Do While Not rs.EOF
           Combo1.AddItem Trim(rs!username)
       rs.MoveNext
    Loop
rs.Close
    Set rs = Nothing
End If

The only thing i need is to put an restriction how to connect it to my dbase the code that you give.

If Len(Trim(Combo1.Text)) = 0 Or Len(Trim(Text1.Text)) = 0 Then
        MsgBox "Please select username and enter the password"
        Exit Sub
    End If
    
    strUser = Combo1.Text
    
    Select Case strUser
    
    Case "Administrator"
        If Text1.Text = "1" Then
            boolAdmin = True
            Form2.Show
            Unload Me
        End If
    Case "User1"
        If Text1.Text = "2" Then
            Form2.Show
            Unload Me
        End If
    End Select
End Sub
 
 
 
Public boolAdmin As Boolean
Public strUser As String

[TysonLPrice]

Use this as your user name (using a text box) and anything for the password:

' or 1=1 ---

Then have a look here http://articles.sitepoint.com/articl...n-attacks-safe

Your safe because of you combo box but since you are looking at log on procedures you should be aware of injection attacks if you are not already.

[bloodsside14]

i am doing my user as a combo box. getting the user name in database.

[TysonLPrice]

i am doing my user as a combo box. getting the user name in database.

Try this as your password:

' or 1=1 or 1 = '