Java - How to implement case-senstive username and password [duplicate]

Question

So I making this login form where the credentials (username and password) are stored in MYSQL. I want the username and password to be case sentive.

AuthDAO.java

public static int checkUserPass(String username, String password){
    int userId = -1;
    try{
        Class.forName("com.mysql.jdbc.Driver");
        cn = DriverManager.getConnection("jdbc:mysql://localhost/b440", "root", "b440");

        String q="SELECT userId FROM user WHERE username='"+username+"' AND password='"+password+"'";

        Statement st = cn.createStatement();
        ResultSet rs = st.executeQuery(q);
        while(rs.next()){
            userId=Integer.parseInt(rs.getString("userId"));
        }
        rs.close();
        st.close();         
    }catch(Exception e){
        System.err.println(e.getMessage());
        e.printStackTrace();
    }
    DB_close();
    if(userId!=-1)
        return userId;
    return -1;
}

LoginServlet.java

else{
    int ID = checkUserPass(username, password, role);
    if(ID!=-1 ){ //User Is Legit!!
        loggedIn = "true";
        HttpSession se = request.getSession();
        se.setAttribute("user", getUserById(ID));
        se.setAttribute("loggedIn", loggedIn);
        url = "/index.jsp";
        msg = "Login Successful!";

        request.setAttribute("loggedIn", loggedIn);
        request.setAttribute("msg", msg);
    }
    else{
        msg = "Invalid Login, please check username or password";
        url = "/login.jsp";
        loggedIn = "false";
        request.setAttribute("loggedIn", loggedIn);
        request.setAttribute("msg", msg);           
    }

Not what you asked - but PLEASE read all about SQL injection attacks. — Dawood ibn Kareem
– Dawood ibn Kareem, Commented Oct 4, 2015 at 18:23
It means it should differentiate between capital and lower case letters. For eg: if the username and passwords are Flash and faST respectively then it shouldn't accept flash, FLASH or fast, FAST as the login credentials. — Sick Series
– Sick Series, Commented Oct 4, 2015 at 18:24
For god's sake please change to prepared statements to fill in username and password and use a secure hashing algorihm with salting to store passwords. — try-catch-finally
– try-catch-finally, Commented Oct 4, 2015 at 18:25

Adil Shaikh · Accepted Answer · 2015-10-04 18:29:18Z

2

By default mysql queries are case-insensitive.

though you can use BINARY like this -

SELECT userId FROM user WHERE BINARY username='"+username+"' AND  BINARY password='"+password+"'

Or there are some other ways -

http://dev.mysql.com/doc/refman/5.0/en/case-sensitivity.html

edited Oct 4, 2015 at 18:29

answered Oct 4, 2015 at 18:23

Adil Shaikh

44.8k17 gold badges95 silver badges112 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Java - How to implement case-senstive username and password [duplicate]

1 Answer 1

Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Linked

Related