Specifying Values for User IDs and Passwords

You can specify values for the userid= and password= parameters in any of three ways:

1. Hard-code the values.

2. Collect the password or user ID through an HTML form. The value is passed to htmSQL along with the CGI request for your input file. You specify the password or user ID by using a variable reference as the value of this parameter. The following example illustrates the use of variable references as the values of the userid= and password= parameters.

   {update datasrc="Employee1" userid="{&userid}" password="{&password}"}

3. In the htmSQL input file, perform a query that retrieves the user ID or password from a user ID/password data set. In subsequent query and update sections, you can use a variable reference to refer to the value in either a userid= or password= parameter (see previous example).

The first of these three methods is not very secure; the second method is secure only if you are using secure sockets or secure HTTP; the third method is fairly secure and, if your Web server supports client authentication, can be used to supply a different user ID and password for each user.