public RegisterUserCode HashClearTextPassword(string UserName)
{
BorrowerDAL dal = new BorrowerDAL(_connection);
Borrower b = dal.BorrowerFindByName(UserName);
if (b == null)
{
return(RegisterUserCode.UserNameNotFound);
}
BorrowerSecuredDAL sdal = new BorrowerSecuredDAL(_connection);
BorrowerSecured sb = sdal.BorrowerSecuredFindByID(b.BorrowerID);
if (sb == null)
{
return(RegisterUserCode.SecuredDataNotFound);
}
// when using cleartext the SALT Field contains "ClearText" instead of salt
// the cleartext password in in HASH
if (sb.Salt == "ClearText")
{
string salt = System.Web.Helpers.Crypto.GenerateSalt(20);
// when using cleartext, the HASH field contains the cleartext password
string pw = sb.Hash + salt;
string hash = System.Web.Helpers.Crypto.HashPassword(pw);
sdal.BorrowerSecuredUpdateJust(b.BorrowerID, hash, salt);
}
else
{
return(RegisterUserCode.SecuredAlready);
}
return(RegisterUserCode.Success);
}
public BorrowerSecured BorrowerSecuredFindByID(int BorrowerID)
{
BorrowerSecuredDAL dal = new BorrowerSecuredDAL(_connection);
return(dal.BorrowerSecuredFindByID(BorrowerID));
}