please suggest sql query for input password whcich does not contatin consecutuive reprating chrcters

Question

1.00/5 (1 vote)

See more:

SQL

SQL-Server-2008R2

hello guys,

please suggest sql query for input password whcich does not contatin consecutuive reprating chrcters

Posted 20-Oct-14 20:56pm

rajshreelande

Add a Solution

2 solutions

Solution 1

Why would you want to use an SQL query to do this?
That would mean passing a human readable text string password to SQL, which is a security risk as well as silly - passwords should be hashed well before they get to SQL: Password Storage: How to do it.[^]

And besides, why should two consecutive characters not be the same: I frequently use GUID values as passwords, and they do contain repeating characters - which does not reduce the security level in the slightest!

Do validation in your presentation software, and only send valid (secure) data to SQL.

Posted 20-Oct-14 21:02pm

OriginalGriff

Comments

rajshreelande 21-Oct-14 3:09am

becoz its a requriment do validations from database..

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Maciej Los · Accepted Answer · 2014-10-21T20:57:00

Have a look at example:

SQL

DECLARE @string VARCHAR(30) = 'rahkkkff'

;WITH CTE AS
(
	SELECT 1 AS LetterPosition, CONVERT(VARCHAR(1),LEFT(@string, 1)) AS Letter, RIGHT(@string,LEN(@string)-1) AS Remainder, CHARINDEX(REPLICATE(LEFT(@string, 1),3), @string, 1) AS FoundedAt
	WHERE LEN(@string)>1
	UNION ALL
	SELECT LetterPosition + 1 AS LetterPosition, CONVERT(VARCHAR(1),LEFT(Remainder, 1)) AS Letter, RIGHT(Remainder,LEN(Remainder)-1) AS Remainder, CHARINDEX(REPLICATE(LEFT(Remainder, 1),3), Remainder, 1) AS FoundedAt
	FROM CTE
	WHERE LEN(Remainder)>1
	UNION ALL
	SELECT LetterPosition +1 AS LetterPosition, CONVERT(VARCHAR(1),Remainder) AS Letter, NULL AS Remainder, CHARINDEX(REPLICATE(LEFT(Remainder, 1),3), Remainder, 1) AS FoundedAt
	FROM CTE
	WHERE LEN(Remainder)=1
)
SELECT @string AS MyString, REPLICATE(Letter,3) AS ConsecutiveLetters, LetterPosition AS FoundedAt
FROM CTE
WHERE FoundedAt=1

Result:

rahkkkff	kkk	4

Above query is used to check string for 3 consecutive letters, BUT...
You wrote: "query for input password whcich does not contatin consecutuive reprating chrcters", which means that you store passwords as a plain text. It's BAD idea!
Please, see:
http://stackoverflow.com/questions/1054022/best-way-to-store-password-in-database[^]
Beginners guide to a secure way of storing passwords[^]