Where to store DB Name and Password

Paul

Hi, I've got a SQL Server backend where I'm testing a new app and I'm
currently storing the DB name and password in a table. I suppose this
is secure to some extent, but what would you recommend, or is this the
defacto location for this type of data?

~Paul

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 18 '05 #1

Subscribe Post Reply

1231

Vaibhav

If you are talking about asp.net app with a sql server backend, then the
recommended place to store this information is in the web.config file.

HTH
"Paul" <do*****@paulNOSPAMMERleblanc.net> wrote in message
news:uL****************@TK2MSFTNGP12.phx.gbl...

Hi, I've got a SQL Server backend where I'm testing a new app and I'm
currently storing the DB name and password in a table. I suppose this
is secure to some extent, but what would you recommend, or is this the
defacto location for this type of data?

~Paul

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 18 '05 #2

Steve C. Orr [MVP, MCSD]

This kind of information is commonly stored in web.config.
If you don't feel that's secure enough, you can store your password
encrypted in the registry.
Here's more information:
http://msdn.microsoft.com/library/de...itysection.asp

--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Paul" <do*****@paulNOSPAMMERleblanc.net> wrote in message
news:uL****************@TK2MSFTNGP12.phx.gbl...

Hi, I've got a SQL Server backend where I'm testing a new app and I'm
currently storing the DB name and password in a table. I suppose this
is secure to some extent, but what would you recommend, or is this the
defacto location for this type of data?

~Paul

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 18 '05 #3

A. Elamiri

I would recommend use Windows Authentication in your connection string, that
way you don't have to store the username and password in Web.Config

This is a great check list for those kinds of security issues
http://msdn.microsoft.com/library/de...CL_SecuAsp.asp
--
Abdellah Elamiri
..net Developer
Efficacy through simplicity
"Paul" <do*****@paulNOSPAMMERleblanc.net> wrote in message
news:uL****************@TK2MSFTNGP12.phx.gbl...

Hi, I've got a SQL Server backend where I'm testing a new app and I'm
currently storing the DB name and password in a table. I suppose this
is secure to some extent, but what would you recommend, or is this the
defacto location for this type of data?

~Paul

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 18 '05 #4

Similar topics

Store database password

by: Pat A | last post by:

We have a dilemma. We are storing our database password in an include file that resides outside of the web root. The password is in plain text. So, no one can get that password because it can't...

PHP

Where to store database connection info???

by: faktujaa | last post by:

Hi, Currently im storing the connection info. in XML file on the C drive. the only problem with this is that anybody can open and check the database name. I know encryption can solve this problem...

.NET Framework

where to save user settings in an app

by: Dica | last post by:

i've got an app that needs to connect to sql server and login with a useName/password. currently, my app saves this info in an XML file in plain text (i.e. no encryption). everytime the app is...

C# / C Sharp

Where/How to Securely Store ID and Password?

by: Guadala Harry | last post by:

What are my options for *securely* storing/retrieving the ID and password used by an ASP.NET application for accessing a SQL Server (using SQL Server authentication)? Please note that this ID and...

ASP.NET

Where to store DB Name and Password

by: Paul | last post by:

Hi, I've got a SQL Server backend where I'm testing a new app and I'm currently storing the DB name and password in a table. I suppose this is secure to some extent, but what would you recommend,...

ASP.NET

Where to store the DB password in a asp.net app?

by: Darren Clark | last post by:

Basically i am curious as to where everyone stores there database details for ASP.NET apps? When developing controls i usually stored it in the web.config file. Then i move it to a internal...

ASP.NET

Where to store to connecting string in WinForm Application

by: ad | last post by:

We usually store the connection string of Web Applicaiton in Web.Config. Now I want to develop WinForm Application. Where is the better place to store the conneciton string?

ASP.NET

Where to hide the encryption key

by: Mark R. Dawson | last post by:

Hi all, I have a configuration file that is storing sensative data, like db passwords etc. I want to encrypt the file so that people can not see the contents. What are the standard practices for...

C# / C Sharp

Where to Store Database Connection String Info for Windows Forms Application

by: Merk | last post by:

I'm looking for a safe and maintainable way to store connection string info (connecting to SQL Server 2005 from .NET 2.0 Windows Forms client app); things like server name or IP address and...

.NET Framework

How to turn on java script in a villaon keypad mobile phone

by: Charles Arthur | last post by:

How do i turn on java script on a villaon, callus and itel keypad mobile phone

Java

Basic Javascript concepts

by: aa123db | last post by:

Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...

Javascript

Batch import of multiple excel files into the database

by: ryjfgjl | last post by:

If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...

Data Management

Migrating Website to Cloud - Emmanuel Katto

by: emmanuelkatto | last post by:

Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel

General

Looking to do Android software development, any suggestions? Is flutter better?

by: nemocccc | last post by:

hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?

General

Is that possible of reading the .csv file in column wise and the column have different lengths ?

by: Sonnysonu | last post by:

This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...

C / C++

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...

General

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...

Windows Server

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

C / C++