db connection string in web.config

[J Jones]

Hi,
I feel a bit foolish having my db connection sting, with password/username
in my web.config file. It just dont seem right, its a bit insecure surley?
Where is a better place for it?
Thanks.
Jim.

[Scott Allen]

In certain environments it certainly is risky.

Take a look at the application configuration block from MS which
supports encryption and signing of config information.

http://msdn.microsoft.com/library/de.../html/cmab.asp

--
Scott
http://www.OdeToCode.com
On Thu, 5 Feb 2004 13:32:08 +0000, J Jones <ji*@nospam.com> wrote:

Hi,
I feel a bit foolish having my db connection sting, with password/username
in my web.config file. It just dont seem right, its a bit insecure surley?
Where is a better place for it?
Thanks.
Jim.

[Eugene Jenihov]

Hi

http://msdn.microsoft.com/library/en...cnetlpMSDN.asp

"J Jones" <ji*@nospam.com> wrote in message
news:1m*******************************@40tude.net. ..

Hi,
I feel a bit foolish having my db connection sting, with password/username
in my web.config file. It just dont seem right, its a bit insecure surley?
Where is a better place for it?
Thanks.
Jim.