+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Is this a good method for login form VB.net (/showthread.php?tid=5735266)
Is this a good method for login form VB.net - CacheIsAFag - Oct 11, 2017
Note the login.php script on webserver is not vulnerable to SQLI attacks.
PHP Code
<?php
Dim result As String = WebClient.DownloadString("-censored-/login.php?username=" + TextBox1.Text + "&password=" + TextBox2.Text)
If result.Contains("Login.Success") Then
MessageBox.Show("Login successful.")
SaveDetails() (save details is a public function so it can be accessed on other forms apart from Form1, I used this for checking if the user is logged in on certain events. Incase the login form is somehow bypassed.)
Hide()
Form2.Show()
Else
If result = "Login.Failed" Then
MessageBox.Show("Failed to login.")
Else
MessageBox.Show("An Error Occured!")
End If
End If
* - MatataSmith - Oct 11, 2017
(Oct 11, 2017 02:52 PM)CacheIsAFag Wrote: Note the login.php script on webserver is not vulnerable to SQLI attacks.
PHP Code
<?php
Dim result As String = WebClient.DownloadString("-censored-/login.php?username=" + TextBox1.Text + "&password=" + TextBox2.Text)
If result.Contains("Login.Success") Then
MessageBox.Show("Login successful.")
SaveDetails() (save details is a public function so it can be accessed on other forms apart from Form1, I used this for checking if the user is logged in on certain events. Incase the login form is somehow bypassed.)
Hide()
Form2.Show()
Else
If result = "Login.Failed" Then
MessageBox.Show("Failed to login.")
Else
MessageBox.Show("An Error Occured!")
End If
End If
No it's very easy to crack this program.
For what are you using this method/ what should your program do? If i know what type of program this is i can help you. :)
* - CacheIsAFag - Oct 11, 2017
(Oct 11, 2017 03:30 PM)MatataSmith Wrote: No it's very easy to crack this program.
For what are you using this method/ what should your program do? If i know what type of program this is i can help you. :)
It's an account generator. (i know it's not allowed here hence i will not sell here)
Even if the login form was bypassed they could not use the program to generate accounts as it uses gen.php?action="accounttype"&username=user&password=password
* - Barret - Oct 11, 2017
He said no, what part of that is unclear?
* - Rhez - Oct 11, 2017
(Oct 11, 2017 02:52 PM)CacheIsAFag Wrote: Note the login.php script on webserver is not vulnerable to SQLI attacks.
But I can clearly see it as vulnerable on a bruteforce attack.
Make a server sided variables where only authorized person can access it so even they can get in the software, they just get nothing but a hollow source.
* - webdev77 - Oct 11, 2017
Sending and receiving anything in plain text is not really secure.