1

I have following connection string in my web application.

<add name="ApplicationDs" connectionString="Data Source=(localhost);Initial Catalog=DBName;User ID=XXX;Password=xxxxxxx;" providerName="System.Data.SqlClient"/>

For some security purpose , unable to put sql username and password directly in web.config file. If anything build in security option is available in asp .net to handle this.

Advice me

2 Answers 2

2

Use integrated security and run your web application with a user account you gave permissions to within your database.

Data Source=myServerAddress;Initial Catalog=myDataBase;Integrated Security=SSPI;

for more connection string examples, find them here http://www.connectionstrings.com/sql-server-2012

Sign up to request clarification or add additional context in comments.

2 Comments

Thanks.. Hi could you explain about Integrated Security=SSPI
1

You might consider encrypting your connection string section. If the security issue is that the username and password cannot be exposed in clear text, then encryption might help/solve the issue.

For more information on web.config encryption, see this link.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.