SQL Server Authentication hacking

From: dave (david_whitehouse@embanet.com)
Date: 09/24/02 

From: "dave" <david_whitehouse@embanet.com>
Date: Tue, 24 Sep 2002 03:49:07 -0700

I currently connect to SQL 7 and 2K servers using SQL
server authentication. This means that in the connection
string from the VB client application the username and
password is passed across the network (connection string
is shown below and uses ADO 2.7)

I am trying to find out if this method is venerable to
hackers who could potentially get this information and
then log in themselves. Is this the case or is the
information encrypted?

db.Open "Provider=SQLOLEDB.1;Password=xyz;Persist Security
Info=False;User ID=abc;Initial Catalog=DBname;Data
Source=servername"

Relevant Pages

  • Re: Syntax
    ... tablename above except that it is an mdb rather than a table in SQL server. ... Thus my connection table is now the mdb file name minus the ".mdb" extension ... the Access mdb connection string should be the variable name as ...
    (microsoft.public.sqlserver.dts)
  • Re: Unable to Locate Server
    ... I am using the copy of SQL Express that came with Visual Studio. ... > Boolean& failoverDemandDone, String host, String failoverPartner, String ... > owningObject, SqlConnectionString connectionOptions, String newPassword, ... >> trying to make a remote database connection while you think your database is ...
    (microsoft.public.sqlserver.setup)
  • Re: Setting a combo Rowsource from SQL server
    ... Since you set the RowSource to the SQL String, ... the Connection you established is not used. ...
    (microsoft.public.access.forms)
  • Re: Why wont this simple SQL statement INSERT a value?
    ... use the parameter in your SQL statements preceeded by a ?. ... problem was to do with the VS2005 built connection string DataSource=| ... Dim num, value As String ...
    (microsoft.public.dotnet.languages.vb)
  • Re: 2nd db connection from 12/21
    ... Never used DAO to connect to a Sql Back end but if you can use ADO this ... if the server accepts remote connections on the ... Dim strCon As String, strSql As String ... There is a great resource for Connection strings here ...
    (microsoft.public.access.formscoding)