Scribd Logo
Загрузить

Добро пожаловать в Scribd!

  • Access ADO connection login form check

    Загружено:

    matematika2104
    31 просмотров1 страница
    This document contains VBA code for a login form that queries a database table called "LogIn" to validate a user's username and password. It opens different forms depending on whether the user has an "admin" or "korisnik" permission level stored in the "prava" field. It also notes that the code is vulnerable if the username or password fields contain malicious strings like "or '1'='1".

    Исходное описание:

    Оригинальное название

    SQL injekcija.txt

    Авторское право

    © © All Rights Reserved

    Доступные форматы

    TXT, PDF, TXT или читайте онлайн в Scribd

    Этот документ был вам полезен?

    Это неприемлемый материал?

    Пожаловаться на этот документ
    This document contains VBA code for a login form that queries a database table called "LogIn" to validate a user's username and password. It opens different forms depending on whether the user has an "admin" or "korisnik" permission level stored in the "prava" field. It also notes that the code is vulnerable if the username or password fields contain malicious strings like "or '1'='1".

    Авторское право:

    © All Rights Reserved
    Скачайте в формате TXT, PDF, TXT или читайте онлайн в Scribd
    Отметить как неприемлемый контент
    31 просмотров1 страница

    Access ADO connection login form check

    Загружено:

    matematika2104
    This document contains VBA code for a login form that queries a database table called "LogIn" to validate a user's username and password. It opens different forms depending on whether the user has an "admin" or "korisnik" permission level stored in the "prava" field. It also notes that the code is vulnerable if the username or password fields contain malicious strings like "or '1'='1".

    Авторское право:

    © All Rights Reserved
    Скачайте в формате TXT, PDF, TXT или читайте онлайн в Scribd
    Отметить как неприемлемый контент
    из 1

    ' ukljuciti ADO: referenca Microsoft ActiveX Data Objects x.

    x Library

    Private Sub Command4_Click()

    Dim cn As New ADODB.Connection


    Dim rs As New ADODB.Recordset
    Dim str_SQL As String

    Set cn = CurrentProject.AccessConnection

    str_SQL = "SELECT * from LogIn WHERE UserName='" & txt_UN & "' AND Password='" &
    txt_Pass & "'"
    rs.Open str_SQL, cn, adOpenStatic

    ' MsgBox rs.RecordCount

    If rs.RecordCount = 0 Then
    MsgBox "Pokusajte ponovo"
    txt_UN = ""
    txt_Pass = ""
    Exit Sub
    End If

    If rs!prava = "admin" Then


    DoCmd.OpenForm "osnovni meni"
    DoCmd.Close acForm, "frm_LogIn"
    End If

    If rs!prava = "korisnik" Then


    DoCmd.OpenForm "korisnici"
    DoCmd.Close acForm, "frm_LogIn"
    End If

    End Sub

    NAPOMENA:

    sta ako su UserName i Password:


    ' or '1'='1

    Вам также может понравиться