hiding dbase connection strings

If you have questions about using mojoPortal, you can post them here.

You may want to first review our site administration documentation to see if your question is answered there.

This thread is closed to new posts. You must sign in to post in the forums.

9/27/2006 5:31:59 PM

Craig Cody

Total Posts 22

View Posts

hiding dbase connection strings

How can I hide the database connnection string contained within a web.config file?

9/28/2006 3:36:33 AM

Joe Audette

Total Posts 18439

View Posts

Re: hiding dbase connection strings

You can encypt things in the web.config file.

Just google for "asp.net encrypt web.config" and you'll find some things.

Scott Guthrie has several good links on this topic in this blog post

Hope it helps,

Joe

9/28/2006 3:52:39 AM

Craig Cody

Total Posts 22

View Posts

Re: hiding dbase connection strings

I'm assuming that with most of these approaches, I will need to add an decrypt routine to the site code. Correct?

9/28/2006 4:23:09 AM

Joe Audette

Total Posts 18439

View Posts

Re: hiding dbase connection strings

I think there is also a command line way to do it with some of the switches on the aspnet_regiis tool. Seems like I read where it could be done also with the Web Site Administration tool but I can't find that now so maybe I was imagining it.

I'm certainly open to including it in the site code as long as we can come up with a strategy to secure it so unauthorized users can't change the encryption status of anything.

Joe

You must sign in to post in the forums. This thread is closed to new posts.