Results 1 to 5 of 5
  1. #1
    Join Date
    Nov 2004
    Posts
    51

    Unanswered: Storing passwords in Oracle

    I have a table known a users where I store username and password in text

    I read these from the Visual Basic application where user enters username and password and compare it with the database and then let the user enter the application

    I want to store the password as encrpted text
    Can someone tell me how to do this?

  2. #2
    Join Date
    Sep 2004
    Posts
    60

  3. #3
    Join Date
    Nov 2004
    Posts
    51
    Is there nothing like

    insert into user(name,password) values('ABCD','hello');


    select user,decrypt(password) from user where name='ABCD'

    Thanks

  4. #4
    Join Date
    Dec 2003
    Posts
    1,074
    Not unless you create it.

    There's also DBMS_CRYPTO starting in 10g (and maybe 9i, I can't remember). It's replacing DBMS_OBFUSCATION.

    -cf

  5. #5
    Join Date
    Jun 2004
    Location
    Liverpool, NY USA
    Posts
    2,509
    You could setup a on insert trigger on the user table that would perform the encryption automatically, but to what end. You have to make your application aware of the encryption so that it can encrypt/decrypt the password for comparison.
    Bill
    You do not need a parachute to skydive. You only need a parachute to skydive twice.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •