[CacheIsAFag]

Note the login.php script on webserver is not vulnerable to SQLI attacks.

PHP Code


<?php 
Dim result As String = WebClient.DownloadString("-censored-/login.php?username=" + TextBox1.Text + "&password=" + TextBox2.Text)

        If result.Contains("Login.Success") Then
            MessageBox.Show("Login successful.")
            SaveDetails() (save details is a public function so it can be accessed on other forms apart from Form1, I used this for checking if the user is logged in on certain events. Incase the login form is somehow bypassed.)
            Hide()
            Form2.Show()

        Else
            If result = "Login.Failed" Then
                MessageBox.Show("Failed to login.")
            Else
                MessageBox.Show("An Error Occured!")
            End If

        End If 


[MatataSmith]

Note the login.php script on webserver is not vulnerable to SQLI attacks.

PHP Code


<?php 
Dim result As String = WebClient.DownloadString("-censored-/login.php?username=" + TextBox1.Text + "&password=" + TextBox2.Text)

        If result.Contains("Login.Success") Then
            MessageBox.Show("Login successful.")
            SaveDetails() (save details is a public function so it can be accessed on other forms apart from Form1, I used this for checking if the user is logged in on certain events. Incase the login form is somehow bypassed.)
            Hide()
            Form2.Show()

        Else
            If result = "Login.Failed" Then
                MessageBox.Show("Failed to login.")
            Else
                MessageBox.Show("An Error Occured!")
            End If

        End If 


No it's very easy to crack this program.

For what are you using this method/ what should your program do? If i know what type of program this is i can help you. :)

[CacheIsAFag]

No it's very easy to crack this program.

For what are you using this method/ what should your program do? If i know what type of program this is i can help you. :)

It's an account generator. (i know it's not allowed here hence i will not sell here)
Even if the login form was bypassed they could not use the program to generate accounts as it uses gen.php?action="accounttype"&username=user&password=password

[Barret]

He said no, what part of that is unclear?

[Rhez]

Note the login.php script on webserver is not vulnerable to SQLI attacks.

But I can clearly see it as vulnerable on a bruteforce attack.
Make a server sided variables where only authorized person can access it so even they can get in the software, they just get nothing but a hollow source.

[webdev77]

Sending and receiving anything in plain text is not really secure.