ASP and MS Access and Password Authentication

2 Nov 2004 6:25 PM

RC-

I have a MS Access database that contains confidential information for each
employee in the company. I have a web page (asp) that will allow a user to
search for THEIR information based on their log on name. The only draw back
is, anyone sitting at their workstation (while the workstation is logged in
as the other user) will be able to view that employee's confidential
information.

What I would like to do is have my MS Access database prompt the user for a
password. So, the first step would be to have the user enter a password
into the database the first time they access the site. I would like to have
a password and confirm password option initially. After that, any time they
enter the page, they will only have to type in the password to gain access
to the page. After that, the code will run and allow them to find their
data.

I can create a new database for this purpose (or use the same one). I just
need some help getting started. I'm able to query a database using ASP but
I don't know how to update a database using ASP.

Thanks for your time and thanks in advance for any help!
RC-

3 Nov 2004 7:08 PM

clintonG

Two current trends regarding the security of acess and authentication...

You may have seen what are called 'captchas' which display an image with
distorted text presuming the form is protected from bots attempting to
automate the login process. When using a captcha the form entry requires a
human operator to read the distorted text and enter the pass-phrase into the
form.

The use of a 'pass-phrases.' For example any attempt to access secured
content would ask "What is your Grandma's middle name?" where the challenge
and the answer is created by the user and stored in the database.

In any event, you should hire a developer. I have a recommendation of
course...

--
<%= Clinton Gallagher, "Twice the Results -- Half the Cost"
         Architectural & e-Business Consulting -- Software Development
         NET csgallag***@REMOVETHISTEXTmetromilwaukee.com
         URL http://www.metromilwaukee.com/clintongallagher/

Show quoteHide quote

"RC-" <r_can***@hotmail.com> wrote in message
news:el5jVlQwEHA.3908@TK2MSFTNGP12.phx.gbl...
> I have a MS Access database that contains confidential information for
each
> employee in the company. I have a web page (asp) that will allow a user
to
> search for THEIR information based on their log on name. The only draw
back
> is, anyone sitting at their workstation (while the workstation is logged
in
> as the other user) will be able to view that employee's confidential
> information.
>
> What I would like to do is have my MS Access database prompt the user for
a
> password. So, the first step would be to have the user enter a password
> into the database the first time they access the site. I would like to
have
> a password and confirm password option initially. After that, any time
they
> enter the page, they will only have to type in the password to gain access
> to the page. After that, the code will run and allow them to find their
> data.
>
> I can create a new database for this purpose (or use the same one). I
just
> need some help getting started. I'm able to query a database using ASP
but
> I don't know how to update a database using ASP.
>
> Thanks for your time and thanks in advance for any help!
> RC-
>
>