Login form Security

[ICTkirsten]

Hello,

I have a login form which works perfectly fine.

Trouble is, i store the login details i.e. username and password in the employees table so technically other users who see this table will be able to login with that users login details..

Is there a way i can tacke this?

Also how do i restrict certain features of my database from users logged in?

The login directs users to the main menu which has buttons directing the user to all features available on the system, But i have dentists for example who should not have access to the registration form which receptionists use..

Another thing is one of the dentists is also the owner who has access to the entire systems features so if there is code involved here please could you bare that in mind

Any advice would be appreaciated

thank you

 

[gemma-the-husky]

make it harder to get at the database window

make it harder to get at this user permissions table in particular
eg - keep that table in a separate pwd protected dbs - and connect to it, and then drop the connection after use - then users won't be able to see the users table

encrypt the details? - at least the password
xor encryption is "lite", but maybe adequate for this.

 

[Minty]

You will need to set up a table with access levels against user ID's and then only enable controls for those that have a suitable access level.

It's a slight pain to set up, but if you have a menu form to access all the other functions it is quite easy to implement.

 

[ICTkirsten]

are there any simpler ideas out there? my teacher says its straight forward... ive been trying to work it out for months now

 

[Minty]

What have you done so far that isn't working?
What we have described isn't that difficult to implement...

 

[ICTkirsten]

i have just created validation so if the field is blank the user will be prompted with error messages...

And oh okay thats great do you mind giving me a bit more details? or if theres something i can find to help me please