Securing connection string

[cawthor]

Hi,

My connection string within my code contains the database username and password. I was wondering the best way to hide this information. I am working on an Intrenet site which ises Windows Authentication in IIS, so the site is not operating via the Internet Guest Account. Therefore, any user who has access to the site could also map to the

http://wwwroot

folder and view my asp files. I thought about moving the connection string to a separate file in a different folder and securing that folder, but all the users would need access to that folder if my site is running via windows authentication right?

Hope this makes sense...any suggestions would be appreciated.

THanks.

 

[vbkris]

use COM. using VB u could create a DLL that has basic connection functionalities (both VB and ASP share the same ADO objects). then use SErver.CreateObject() to call the DLL into ur ASP and wallah!, ur connection info is protected...

Known is handfull, Unknown is worldfull

 

[Sheco]

wallah = voila ???

 

[vbkris]

nope, thats just my way of saying voila ...

Known is handfull, Unknown is worldfull