Password with Case-sensitive

Question

0.00/5 (No votes)

See more:

Hi All,

In my existing oracle member table(1 lakh members are there currently), password was stored in all upper cases.

Is there any way to convert these passwords to case-sensitive. (that is, what ever user entered during registration should be stored as it is, i can do this for new registration but iam having issues with existing memebrs)

When user clicks on the FORGOT PASSWORD link, it picks up this UPPER CASE password and displaying(i need to display the password in whatever case user enters while registration)

Please guide me on how to update the existing 1 lakh user passwords to case sensitive

Regards,
Sriram Ravi

Posted 30-Oct-14 18:37pm

Member 9975709

Add a Solution

Comments

Robert Welliever 31-Oct-14 0:47am

Umm, how about never storing passwords? I've never met someone that thought that was a good idea.

Member 9975709 31-Oct-14 1:13am

yes you are right Robert.

Our existing system is storing passwords, its not the right time to change since we made live release recently.

Any thing can you think and tell me, about updating existing password to case-sensitive(if query update, also fine for me)

Robert Welliever 31-Oct-14 1:28am

Sorry, I don't have much experience with Oracle. I've only migrated data from Oracle to Sql and they didn't play nice (for example Oracle has more precise Datetime than Sql). I do remember Oracle WAS case-sensitive for string matching while Sql Server is not though. If your original passwords are all upper case, then how would you know what the original password even was? You wouldn't be able to convert them to case-sensitive because that information was lost, no? Wouldn't you have to ask the original creator of the password which letters were originally lower-case? I mean, how would you even know which characters weren't supposed to be upper-cased since they were converted long ago?

Suvendu Shekhar Giri 31-Oct-14 1:29am

If you have stored passwords in database after converting them to upper case then it is impossible to revert back to the case users have entered during registration. You only can convert them to (1)all lower case or, (2) title case .

Member 9975709 31-Oct-14 1:45am

Ya guys you are right?

I need to know a way like-to send email to member to change password, like that stuff.

I know that i cant change all. Just a way to bypass this issue.

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Maciej Los · Answer 1 · 2014-10-30T21:33:00

Solution 1

If you do not have original passwords, it's impossible!

Do not store passwords as plain text in your table. You should store it as an encrypted form.
I'd suggest you to read it: Password Storage: How to do it.[^]

Posted 30-Oct-14 21:33pm

Maciej Los