Re: Secure way to access an SQL server in a shared hosting environment

From: Arild Bakken (arildb_@hotmail.com)
Date: 11/11/02 

From: "Arild Bakken" <arildb_@hotmail.com>
Date: Mon, 11 Nov 2002 13:01:29 +0100

You could encrypt the username and password and keep it in the web.config
file.

Arild

Marius Greuel wrote:
> Hi,
>
>
>
> I have a shared web-hosting account, and I am wondering if there's a
> way in ASP .NET to access an SQL database without exposing
> user/password information to users on the same machine (running under
> the user ASPNET or IUSR_xxx).
>
>
>
> Initially, I stored the connection string in the web.config file, but
> since it seems impossible to prevent other users from poking around
> in my directories, it does not seem to be a good idea to store the
> login information somewhere in my directories.
>
>
>
> What's the recommended way to access an SQL server in a shared hosting
> environment and how would I need to set it up?
>
>
>
> Thanks,
>
> Marius