How do i maintain username and password in database securly

You can use one-way encryption, like MD5, to encrypt the values and store them encrypted in the database. This is not highly needed for the username, but it is recommended for the password.

Here is an useful snippet to get the MD5 hash for the given string: http://balusc.xs4all.nl/srv/dev-jep-use.html#GenerateMD5Hash

When an user registers, let it choose a non-existing username and ask for the password twice. If the username does not exist in the database and the entered passwords are equal, then hash the password (and eventually the username) and save it to the database.

When an user logs in, hash the entered password and compare it with the stored hash in the databse. If it is equal, then proceed with login.

BalusCa at 2007-7-11 23:36:46 >