Deploying config files

[Mervin Williams]

I have my database connection string, including the password, stored within
my app.config. Do I need to include the config file within my deployment
package? If so, how do I include my config within the deployment package so
that it cannot be viewed by users?

Thanks in advance,

Mervin Williams

 

[Brendan Green]

Yes, the app.config needs to be deployed.

Use the Enterprise Library, and use it to encrypt the sensitive information.

 

[Claes Bergefall]

And if you want to prevent your users from reading it, you'll need
to encrypt the values in it or put some exclusive access
permissions on it (or preferably both).

/claes