Reply to topic
Connection string encryption
jgold


Joined: 07 Apr 2004
Posts: 1
Reply with quote
I need to encrypt the SQL Server connection string (and a user password on my login page).
MSDN suggests using the DPAPI User Store or Machine Store to perform this.
Are either of these available on my shared account (Dev Ultra w/SQL Server Plan 1)?

If not, what other technique do you recommend?
Josh
Forum Regular

Joined: 01 Apr 2004
Posts: 1031
Location: Felton, Delaware
Reply with quote
Well, I've never heard of encrypting the connection string, but there are a few alternatives to storing it in every page of your application.

If you're using ASP, you can store such variables in the global.asa file. Other than that you don't have many options.

If you're using ASP.NET, you can store these variables in your global.asax file or even your web.config file.

If you're using ColdFusion, you can store these variables in your Application.cfm file.

Any of these solutions are beneficial to what you're looking for because even upon raising an exception/throwing an error, the code within these files will NEVER be displayed, and were designed with such things in mind. You cannot directly access or download any of these files, so you don't have to worry about information being obtained in that manner either.
Connection string encryption
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic