Guest User

Untitled

a guest
Dec 21st, 2018
159
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.89 KB | None | 0 0
  1. private void SetPassword(string user, string userPassword)
  2. {
  3. string pwdToHash = userPassword + "^Y8~JJ"; // ^Y8~JJ is my hard-coded salt
  4. string hashToStoreInDatabase = BCrypt.HashPassword(pwdToHash, BCrypt.GenerateSalt());
  5. using (SqlConnection sqlConn = new System.Data.SqlClient.SqlConnection(...)
  6. {
  7. sqlConn.Open();
  8. SqlCommand cmSql = sqlConn.CreateCommand();
  9. cmSql.CommandText = "UPDATE LOGINS SET PASSWORD=@parm1 WHERE USERNAME=@parm2";
  10. cmSql.Parameters.Add("@parm1", SqlDbType.Char);
  11. cmSql.Parameters.Add("@parm2", SqlDbType.VarChar);
  12. cmSql.Parameters["@parm1"].Value = hashToStoreInDatabase;
  13. cmSql.Parameters["@parm2"].Value = user;
  14. cmSql.ExecuteNonQuery();
  15. }
  16. }
  17.  
  18. private bool DoesPasswordMatch(string hashedPwdFromDatabase, string userEnteredPassword)
  19. {
  20. return BCrypt.CheckPassword(userEnteredPassword + "^Y8~JJ", hashedPwdFromDatabase);
  21. }
Add Comment
Please, Sign In to add comment