如何更改MVC 5中散列和加密的密码？

我正在为一个网站创建一个主页，我偶然发现了一个小功能。



所以我使用数据库（SQL）来保存我的用户。

我正在抛出一些alt并散列他们的密码，但后来问题来了。



如果用户试图更改密码，

我要求他插入他的旧密码，他的新密码并确认他的新密码。



然而，由于密码经过哈希处理和加密，因此它们不匹配，我在SQL中的存储过程返回-2。

Hi,

I'm creating a Homepage for a website and I've stumbled in a small feature.

So I'm using a database (SQL) to save my users.
I'm throwing some alt and hashing their passwords but then my problem comes.

If the user attempts to change his password,
I ask him to insert his older password, his new and confirm his new.

Yet since the passwords are hashed and salted they don't match and my stored procedure in SQL returns -2.

ALTER PROCEDURE [dbo].[spChangePassword]
(
        @sUsername varchar(50),
	@sPasswordNew varchar(100),
	@sPasswordNewSalt varchar (128),
	@sPasswordNew varchar (100),
	@sPasswordNewSalt varchar (128),
)
AS
BEGIN
	SET NOCOUNT ON;
	
    if (exists (select 1
                from USERS
	        where Username = @sUsername 
                and Password = @sPasswordOld))
				
    begin
		if (exists (select 1
					from USERS
					where Username = @sUsername
					and Password != @sPasswordNew))

			begin
				select 1;
				 
				update BLC_USER
				set Password = @sPasswordNova,
				Password_Salt = @sPasswordNewSalt,
				where Username = @sUsername;
			end	

		 else
				select -1; -- New Pass = Old Pass, please chnage
	end
	else
		select -2; -- Old Pass is wrong
END

我是否在哈希密码方面做错了什么？

如何比较两个盐渍密码？



干杯，

Zamuk

Am I doing something wrong in regards to the hashing passwords?
How can I compare two salted passwords?

Cheers,
Zamuk