惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Webroot Blog
Webroot Blog
U
Unit 42
A
About on SuperTechFans
宝玉的分享
宝玉的分享
月光博客
月光博客
C
CERT Recently Published Vulnerability Notes
P
Privacy International News Feed
Microsoft Security Blog
Microsoft Security Blog
G
Google Developers Blog
P
Privacy & Cybersecurity Law Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
S
Securelist
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
Spread Privacy
Spread Privacy
L
Lohrmann on Cybersecurity
Apple Machine Learning Research
Apple Machine Learning Research
K
Kaspersky official blog
Hugging Face - Blog
Hugging Face - Blog
B
Blog
I
Intezer
Last Week in AI
Last Week in AI
T
Threat Research - Cisco Blogs
V
V2EX
L
LangChain Blog
AI
AI
G
GRAHAM CLULEY
T
Tor Project blog
人人都是产品经理
人人都是产品经理
D
Docker
WordPress大学
WordPress大学
Google DeepMind News
Google DeepMind News
I
InfoQ
Y
Y Combinator Blog
C
Comments on: Blog
GbyAI
GbyAI
www.infosecurity-magazine.com
www.infosecurity-magazine.com
酷 壳 – CoolShell
酷 壳 – CoolShell
T
Tailwind CSS Blog
aimingoo的专栏
aimingoo的专栏
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
腾讯CDC
N
News and Events Feed by Topic
MyScale Blog
MyScale Blog
H
Help Net Security
Vercel News
Vercel News
T
Tenable Blog
博客园 - 三生石上(FineUI控件)
爱范儿
爱范儿

博客园 - angelfeather

json中获取key值 iOS开发常用代码块(2) 区别不同浏览器,CSS hack写法 [推荐]13款js编辑器大全 web标准 CSS Sprites 用户控件(.ascx)与网页间(.aspx)如何传值的几种方法 彩色验证码 一段常用的Page_Load事件 (如果有更好的希望大家留言) - angelfeather - 博客园 c#.net常用函数和方法集 ASP.NET中$#=的用法 - angelfeather - 博客园 小记一篇~ - angelfeather - 博客园 推荐一个.net代码查看器Reflector 推荐一个学习asp.net的好地方 简单的ArrayList遍历 Microsoft .Net 框架 SDK 快速入门教程 - angelfeather asp.net简单的md5算法 遍历页面的所有button控件 GridView统计数据和修改Cell GridView格式化导出Excel GridView导出Excel
利用MD5加密数据库中的密码 - angelfeather - 博客园
angelfeather · 2008-06-19 · via 博客园 - angelfeather

.NET提供了进行数据加密类,下面就用例子进行说明如何使用MD5进行数据加密。

首先,创建一个UserAccount表,字段两个:UserName和Password,类型分别为varchar(25)和binary(16),下面的ASP.NET代码就是创建用户时的具体实现:

<%@ Import Namespace="System.Security.Cryptography" %>
<%@ Import Namespace="System.Text" %>
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.SqlClient" %>
<script runat="server" language="VB">
    Sub CreateAccount(sender as Object, e as EventArgs)
      '1. 创建连接
      Const strConnString as String 
      strConnString= "Data Source=.;Initial Catalog=test;User Id=sa;Password=;"
      Dim objConn as New SqlConnection(strConnString)
      
      '2. 创建Command对象
      Dim strSQL as String = _
          "INSERT INTO UserAccount(Username,Password) " & _
          "VALUES(@Username, @Password)"
      Dim objCmd as New SqlCommand(strSQL, objConn)
      
      '3. 创建参数
      Dim paramUsername as SqlParameter
      paramUsername = New SqlParameter("@Username", SqlDbType.VarChar, 25)
      paramUsername.Value = txtUsername.Text
      objCmd.Parameters.Add(paramUsername)
      
  
      '加密密码字段

       Dim md5Hasher as New MD5CryptoServiceProvider()
    
      Dim hashedBytes as Byte()   
      Dim encoder as New UTF8Encoding()

      hashedBytes = md5Hasher.ComputeHash(encoder.GetBytes(txtPwd.Text))      

      Dim paramPwd as SqlParameter
      paramPwd = New SqlParameter("@Password", SqlDbType.Binary, 16)
      paramPwd.Value = hashedBytes
      objCmd.Parameters.Add(paramPwd)
      
      
      '插入数据库
      objConn.Open()
      objCmd.ExecuteNonQuery()
      objConn.Close()
      
      'Redirect 其它页面
    End Sub
</script>

<form runat="server">
  <h1>创建帐号:</h1>
  用户名: <asp:TextBox runat="server" id="txtUsername"/>
  <br/>
  密码: <asp:TextBox runat="server" id="txtPwd" TextMode="Password"/>  
  <p><asp:Button runat="server" Text="创建用户" OnClick="CreateAccount"/></p>
</form>

下面是对用户进行验证的ASP.NET代码:

<%@ Import Namespace="System.Security.Cryptography" %>
<%@ Import Namespace="System.Text" %>
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.SqlClient" %>
<script runat="server" language="VB">
    Sub Login(sender as Object, e as EventArgs)
      '1. 创建连接
      Const strConnString as String 
      strConnString= "Data Source=.;Initial Catalog=test;User Id=sa;Password=;"
      Dim objConn as New SqlConnection(strConnString)
      
      '2. 创建Command对象
      Dim strSQL as String = "SELECT COUNT(*) FROM UserAccount " & _
                        "WHERE Username=@Username AND Password=@Password"
      Dim objCmd as New SqlCommand(strSQL, objConn)
      
      '3. 创建参数
      Dim paramUsername as SqlParameter
      paramUsername = New SqlParameter("@Username", SqlDbType.VarChar, 25)
      paramUsername.Value = txtUsername.Text
      objCmd.Parameters.Add(paramUsername)
      
  
      '加密密码
      Dim md5Hasher as New MD5CryptoServiceProvider()
    
      Dim hashedDataBytes as Byte()   
      Dim encoder as New UTF8Encoding()

      hashedDataBytes = md5Hasher.ComputeHash(encoder.GetBytes(txtPwd.Text))      

      Dim paramPwd as SqlParameter
      paramPwd = New SqlParameter("@Password", SqlDbType.Binary, 16)
      paramPwd.Value = hashedDataBytes
      objCmd.Parameters.Add(paramPwd)
      
      
      '执行查询
      objConn.Open()
      Dim iResults as Integer = objCmd.ExecuteScalar()
      objConn.Close()
      
      If iResults = 1 then
        '合法
      Else
        '不合法
      End If
    End Sub
</script>

<form runat="server">
  <h1>登录:</h1>
  用户名:<asp:TextBox runat="server" id="txtUsername"/><br/> 
  密  码:<asp:TextBox runat="server" id="txtPwd" TextMode="Password"/>  
  <p><asp:Button runat="server" Text="登录" OnClick="Login"/>
</form>

下面是MD5CryptoServiceProvider直接生成的例子:

<%@ Import Namespace="System.Security.Cryptography" %>
<%@ Import Namespace="System.Text" %>
<script language="VB" runat="server">
  Sub DisplayEncryptedText(sender as Object, e as EventArgs)
    If Page.IsValid then
      Dim md5Hasher as New MD5CryptoServiceProvider()
    
      Dim hashedDataBytes as Byte()   
      Dim encoder as New UTF8Encoding()

      hashedDataBytes = md5Hasher.ComputeHash(encoder.GetBytes(txtPassword.Text))    
    
      ltlResults.Text = "<b>Encrypted Results</b><br /> The results are encrypted into " & _
              "an array of 16 bytes.  These 16 bytes contain the values:<p><ul>"
    
      Dim b as Byte
      For Each b in hashedDataBytes
	    ltlResults.Text &= "<li>" & b & "</li>"
      Next b
      
      ltlResults.Text &= "</ul>"    
    End If
  End Sub  
</script>

<form runat="server">
  Enter a string:
  <asp:TextBox id="txtPassword" runat="server" />
  <asp:RequiredFieldValidator runat="server" ControlToValidate="txtPassword"
           Display="Dynamic" ErrorMessage="<i>You must provide a value here...</i>" />
  <asp:RegularExpressionValidator runat="server" ControlToValidate="txtPassword"
           Display="Dynamic" ErrorMessage="<i>The string must be 20 characters or less...</i>"
           ValidationExpression="^.{1,20}___FCKpd___2quot; />
  <br />
  <asp:Button runat="server" Text="View the String as Encrypted Text"
	OnClick="DisplayEncryptedText" />
  <p>
  <asp:Literal runat="server" id="ltlResults" />
</form>