Database Password

[A.M]

Hi,

We have a web server running ASP.NET app in DMZ zone provided by Cisco PIX
firewall.
The web application is sending user id and password to the database server.
What is the best practice to make the connection string secure?

Thanks,
Ali

[Steve C. Orr, MCSD]

You can store your password encrypted in the registry.
Here's more information:
[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpgenref/html/gngrfidentitysection.asp[/url]

--
I hope this helps,
Steve C. Orr, MCSD
[url]http://Steve.Orr.net[/url]
Hire top-notch developers at [url]http://www.able-consulting.com[/url]



"A.M" <IHateSpam@sapm123.com> wrote in message
news:%23RMVoR$dDHA.3024@tk2msftngp13.phx.gbl...

> Hi,
>
> We have a web server running ASP.NET app in DMZ zone provided by Cisco

PIX

> firewall.
> The web application is sending user id and password to the database

server.

> What is the best practice to make the connection string secure?
>
> Thanks,
> Ali
>
>

[Jerry III]

Do not store the actual password. Store a hash instead. Unless you're
talking about the connection password, in that case you should use Windows
authentication so the password would not be sent (and encrypt the
connection).

Jerry

"A.M" <IHateSpam@sapm123.com> wrote in message
news:%23RMVoR$dDHA.3024@tk2msftngp13.phx.gbl...

> Hi,
>
> We have a web server running ASP.NET app in DMZ zone provided by Cisco

PIX

> firewall.
> The web application is sending user id and password to the database

server.

> What is the best practice to make the connection string secure?
>
> Thanks,
> Ali
>
>