Where to store DB Name and Password

[Paul]

Hi, I've got a SQL Server backend where I'm testing a new app and I'm
currently storing the DB name and password in a table. I suppose this
is secure to some extent, but what would you recommend, or is this the
defacto location for this type of data?

~Paul

 

[Vaibhav]

If you are talking about asp.net app with a sql server backend, then the
recommended place to store this information is in the web.config file.

HTH

 

[Steve C. Orr [MVP, MCSD]]

This kind of information is commonly stored in web.config.
If you don't feel that's secure enough, you can store your password
encrypted in the registry.
Here's more information:
http://msdn.microsoft.com/library/d.../en-us/cpgenref/html/gngrfidentitysection.asp

 

[A. Elamiri]

I would recommend use Windows Authentication in your connection string, that
way you don't have to store the username and password in Web.Config

This is a great check list for those kinds of security issues
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/CL_SecuAsp.asp