Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP General > Password Storing Standard

Reply
Thread Tools

Password Storing Standard

 
 
Kit Truong
Guest
Posts: n/a
 
      10-01-2004
Hello,

When I'm creating database driven asp applications, I store my constants,
including my connection string to the database within an asp file called
constants.asp. All constants are stored inside asp coding <% ... %> so
people can't save the data through the web.

I've been told this is an insecure way of storing the connect string becuase
my connect string would also store the username and password to connect to
the db.

My question is, what is the current standard for storing an connect string
to a database for asp applications?

Thanks.


 
Reply With Quote
 
 
 
 
Aaron [SQL Server MVP]
Guest
Posts: n/a
 
      10-01-2004
Please don't multi-post.
http://www.aspfaq.com/5003

--
http://www.aspfaq.com/
(Reverse address to reply.)




"Kit Truong" <(E-Mail Removed)> wrote in message
news:J4f7d.668$(E-Mail Removed)...
> Hello,
>
> When I'm creating database driven asp applications, I store my constants,
> including my connection string to the database within an asp file called
> constants.asp. All constants are stored inside asp coding <% ... %> so
> people can't save the data through the web.
>
> I've been told this is an insecure way of storing the connect string

becuase
> my connect string would also store the username and password to connect to
> the db.
>
> My question is, what is the current standard for storing an connect string
> to a database for asp applications?
>
> Thanks.
>
>



 
Reply With Quote
 
 
 
 
dlbjr
Guest
Posts: n/a
 
      10-01-2004
I use the global.asa file for this. It's purpose is to hold constants in application variables.
Yes, There is a level of insecurity in having your connection string here or an asp.
This is fine in most situations. You are limited to your options when your site is on a host server.

If you have exclusive use of a server, you have many other options. A dll with the connection string
can be used to load the connection string on the application start.
--
'dlbjr
'Pleading sagacious indoctrination!


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Change a users password without knowing the old password nor the answer to the password question AAaron123 ASP .Net 1 01-16-2009 02:56 PM
Changing a users password without knowing the old password nor the answer to the password question AAaron123 ASP .Net 2 01-16-2009 02:08 PM
User Images: Storing in Files VS Storing in Database Jonathan Wood ASP .Net 1 06-02-2008 05:56 PM
standard practices for storing user settings Brandon McCombs Java 6 12-30-2006 02:11 AM
storing pointer vs storing object toton C++ 11 10-13-2006 11:08 AM



Advertisments