473,624 Members | 2,027 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Web.config and Passwords

Is there a better way to store data base passwords in web.config file rather
then having them on clear

Jay
Nov 17 '05 #1
4 2211
Staffing,

Here's a great article on how to use hashed passwords in the web.config
file:

http://www.15seconds.com/issue/020305.htm

Sincerely,

--
S. Justin Gengo, MCP
Web Developer

Free code library at:
www.aboutfortunate.com

"Out of chaos comes order."
Nietzche
"Staffing" <jj******@yahoo .com> wrote in message
news:vk******** ****@news.super news.com...
Is there a better way to store data base passwords in web.config file rather then having them on clear

Jay

Nov 17 '05 #2
Staffing,

Here's a great article on how to use hashed passwords in the web.config
file:

http://www.15seconds.com/issue/020305.htm

Sincerely,

--
S. Justin Gengo, MCP
Web Developer

Free code library at:
www.aboutfortunate.com

"Out of chaos comes order."
Nietzche
"Staffing" <jj******@yahoo .com> wrote in message
news:vk******** ****@news.super news.com...
Is there a better way to store data base passwords in web.config file rather then having them on clear

Jay

Nov 17 '05 #3
Its a lot safer to hash passwords. The only time you can't do it is if you
need to be able to get the password clear text at one point or another, then
you have to encrypt.

Jerry

"Somchai U." <so*****@no-email.com> wrote in message
news:uY******** *****@tk2msftng p13.phx.gbl...
You can encrypt them.

Somchai

"Staffing" <jj******@yahoo .com> wrote in message
news:vk******** ****@news.super news.com...
Is there a better way to store data base passwords in web.config file

rather
then having them on clear

Jay


Nov 17 '05 #4
So I have to write the Encryption / Decryption code ? Or is it a built in
function in .NET. Where do I store the key ? Do I hard code that into the
code ?. Should I just use a 3DES encryption ?

Thanks

Jay

"Ravikanth[MVP]" <dv*********@ho tmail.com> wrote in message
news:09******** *************** *****@phx.gbl.. .
Hi

you can put encrypted password in web.config file.
Ravikanth[MVP]

-----Original Message-----
Is there a better way to store data base passwords in

web.config file rather
then having them on clear

Jay
.

Nov 17 '05 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
4599
by: will taubin | last post by:
i would like my program to have a config.php with passwords and other stuff. i would like to have a functions.php to hold all my functions. i would like the functions.php to include/require the config.php as it will need it for database stuff. i cant seem to get the functions in my functions.php to see the variables in config.php
11
4286
by: Florian Lindner | last post by:
Hello, I've a scripts that allows limited manipulation of a database to users. This script of course needs to save a password for the database connection. The users, on the other hand need read permission on the script in order to execute it but should not be able to read out the password. What is the common way to solve this problem? My current way is to allow the users to execute the script with sudo while not having read permission...
0
276
by: Staffing | last post by:
Is there a better way to store data base passwords in web.config file rather then having them on clear Jay
3
16543
by: John Buchmann | last post by:
In my web.config, I have a section that has a name and password: <credentials passwordFormat="Clear"> <user name="aaa" password="bbb" /> </credentials> Is this secure? What is to stop someone from opening up this file (it's a simple text file), getting the sensitive info, and then breaking into my site?
2
2273
by: Chris Dunaway | last post by:
I have a web service that references a data class library which performs SQL Server access. Since the web service is also a class library, there is no App.Config, only Web.config. Is Web.Config the place I should store the connection string? If I call System.Configuration.ConfigurationSettings.AppConfig from the data class library, will it read the settings from the web.config or will it throw an exception? Thanks
5
3669
by: Jason Chan | last post by:
I have a subfolder in a webapp How can the aspx in the subfolder access the web.config in the webapp. I.e. I stored the connectionstring in the \webapp\web.config how the \webapp\subfolder\default.aspx extract the connection? ConfigurationSettings.AppSettings return empty string Do I have to copy the web.config to the subfolder?
4
1226
by: Joshua Kendall | last post by:
This is the code that I currently Have for one password how do I specify multiple ones? There is no "or" statement! What do I do? Private Sub LoginBTN_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles LoginBTN.Click If PassINP.Text = "bluecats" And UserINP.Text = "Joshua" Then Dim frmMainApp As New frmMainApp() : frmMainApp.Show() Else End End Sub
6
4374
by: Bob | last post by:
Hi, i was wondering whether i would use global.asax or web.config for the connectionstring to the database. I put this in global.asax. Sub Application_Start Application("Connect") = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=c:\mydb.mdb;" End Sub
5
2851
by: =?Utf-8?B?SmVycnkgQw==?= | last post by:
I have a app that uses several membership/role providers. I can list these Providers with the code: Dim rootWebConfig1 As Configuration rootWebConfig1 = WebConfigurationManager.OpenWebConfiguration(Request.ApplicationPath) Dim section As New MembershipSection section = rootWebConfig1.GetSection("system.web/membership")
0
8236
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8173
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8621
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
8335
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8475
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7159
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
4174
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
1785
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1482
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.