hiding dbase connection strings

If you have questions about using mojoPortal, you can post them here.

You may want to first review our site administration documentation to see if your question is answered there.

This thread is closed to new posts. You must sign in to post in the forums.
9/27/2006 5:31:59 PM
Gravatar
Total Posts 22

hiding dbase connection strings

How can I hide the database connnection string contained within a web.config file?
9/28/2006 3:36:33 AM
Gravatar
Total Posts 18444

Re: hiding dbase connection strings

You can encypt things in the web.config file.

Just google for "asp.net encrypt web.config" and you'll find some things.

Scott Guthrie has several good links on this topic in this blog post

Hope it helps,

Joe
9/28/2006 3:52:39 AM
Gravatar
Total Posts 22

Re: hiding dbase connection strings

I'm assuming that with most of these approaches, I will need to add an decrypt routine to the site code.  Correct?

9/28/2006 4:23:09 AM
Gravatar
Total Posts 18444

Re: hiding dbase connection strings

I think there is also a command line way to do it with some of the switches on the aspnet_regiis tool. Seems like I read where it could be done also with the Web Site Administration tool but I can't find that now so maybe I was imagining it.

I'm certainly open to including it in the site code as long as we can come up with a strategy to secure it so unauthorized users can't change the encryption status of anything.

Joe
You must sign in to post in the forums. This thread is closed to new posts.