Application Connecting
From: cengiz (cengizu_at_globis.com.tr)
Date: 06/25/03
- Previous message: Santiago Escolin: "SA password"
- In reply to: Adriano Galle Dal Prá: "Application Connecting"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 25 Jun 2003 07:25:16 -0700
Encrypt your connectionstring and store it in windows
registry, give permissions only to your app process and to
admin to read this registry key (use regedt32.exe).Another
way is use NT authentication, or you can use a connection
object that is on COM+
>-----Original Message-----
>We have a major security problem here.
>All of our web application uses UDLs to connect to our
databases.
>This UDLs keeps login and passwords saved.
>
>I wonder if someone gets access to this UDLs can expose
all databases and he
>can access unauthorized data.
>
>Can you guys give me a alternate way to change UDLs to
another way of
>connection without making a lot of work to change all
applications that we
>have? I dont want to hard-code user and passwords into
applications too...
>I was thinking about windows registry keys or
somenthing...
>
>Thanks for help.
>
>Adriano Galle Dal Prá.
>
>
>
>.
>
- Previous message: Santiago Escolin: "SA password"
- In reply to: Adriano Galle Dal Prá: "Application Connecting"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
