access 2010 username and passwords

[john latona]

hi!

i realize that access 2010 does not have the username and password function built into it, so i am trying to build it into my db.

i have a "login form" with text fields titled username and password. i also have a table containing all usernames and passwords. i also have a query that references the table with criteria set to match the form text box data with the table data. this "verification" occurs on click on a button on the fowm. i keep getting stuck on my favorite automation object error and my macro stops after the query opens to display the matching username and password enter.

my macro process continues with an if statement that says if [Text0]=[LOGINS Query]![Username] And [Text4]=[LOGINS Query]![password]then close all windows and then open my "interface" form.

does that all make sense?

im not opposed to going a different route with this, i just need to be able to create username and password protection that i can eventually link to a timestamping function i have writted. part of this "login process" needs to include some way to indicate to the database and all relevant forms or tables, who exactly is using the database. not sure how to get around the multiple users issue.

thoughts anyone?

all help is greatly appreciated.

thanks!

john!

[NeoPa]

First look at When Posting (VBA or SQL) Code. Your example is neither posted in CODE tags nor has been copied across accurately from your code.

The code won't work anyway, as you are trying to access a field in a query (if the name is anything to go by) rather than a valid object you actually have access to. You will need to use DLookup() instead. All the information you need on how to use that can be found by using Context-Sensitive Help.

I'm sorry I can't help much as I'm rushing off for a week+ away from home and computer, but an alternative approach might be to utilise the logged on name of the user. This can be found by using Function to Return UserName (NT Login) of Current User.

As a parting comment, never use passwords in plain text. Store them, and compare them, using a conversion/encryption function of some kind. Remember, security, like any chain, is only as strong as its weakest link. You don't ever want anyone to find out that your work was the link where the chain broke ;-)

[patjones]

As NeoPa suggests, first definitely make sure that your passwords are encrypted. There are a couple of good algorithms out there that I've used and which are good enough for this purpose. Try doing a search for MD5 and/or SHA encryption. The latter is a little more up to date but MD5 could work perfectly well also.

I don't use macros, so I would embed the code that you need in the On Click event for the log in command button.

If you want to continue along these lines let me know and we'll hash it out.

Pat

[NeoPa]

You may find the following links hosted here on Bytes to be particularly helpful for that :
AES Encryption Algorithm for VBA and VBScript
RC4 Encryption Algorithm for VBA and VBScript
SHA2 Cryptographic Hash Algorithm for VBA and VBScript