Pass SecureString value to SQLS Stored Procedure

[FredZimmerman]

Is there a way to pass SecureString value (from C# web application) to
a SQL 2005 stored procedure as Input parameter?

How is it handled from both sides (application, and stored procedure)?

Thanks,

Fred (Atlanta)

 

[Ben Voigt [C++ MVP]]

Is there a way to pass SecureString value (from C# web application) to
a SQL 2005 stored procedure as Input parameter?

How is it handled from both sides (application, and stored procedure)?

No! Sending values to SQL Server is not secure, it can appear in the trace
log or be seen by a packet sniffer. You need to encrypt or hash the value
in your application, then the coded value can be stored and sent using a
normal System.String