Showing posts with label secure. Show all posts
Showing posts with label secure. Show all posts

Monday, March 12, 2012

Pasword Data Type

Hello ...

I want to ask about the best data type protected for pasword colomn in SQL Server .. to make my DB more secure ...

thanks ...

That depends on the version you are using on the effort you want to put in your front end application. There are two ways. Server encrypted data (which is accessible in SQL Server 2005) or client encrypted data (or the combination of both). In SQL Server 2000 I always used a client library to encrypt / decrypt the data that was passed to the server. In SQL Server 2005 there is a server based functionalty for encrypting data.

HTH, Jens SUessmeyer.

http://www.sqlserver2005.de
|||

The following two threads may also be helpful:

http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=258837&SiteID=1
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=263309&SiteID=1

Thanks
Laurentiu

Pasword Data Type

Hello ...

I want to ask about the best data type protected for pasword colomn in SQL Server .. to make my DB more secure ...

thanks ...

That depends on the version you are using on the effort you want to put in your front end application. There are two ways. Server encrypted data (which is accessible in SQL Server 2005) or client encrypted data (or the combination of both). In SQL Server 2000 I always used a client library to encrypt / decrypt the data that was passed to the server. In SQL Server 2005 there is a server based functionalty for encrypting data.

HTH, Jens SUessmeyer.

http://www.sqlserver2005.de
|||

The following two threads may also be helpful:

http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=258837&SiteID=1
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=263309&SiteID=1

Thanks
Laurentiu

Wednesday, March 7, 2012

password in sqlconnectionstring

Hi all.

Is it safe to have my id and password in SqlConnectionString? I have the pw/id in one of aspx file and don't feel secure.

I read from somewhere that it is a better idea to store the string in web.config, but I don't understand how that makes it more secure.

check this article for better approach

http://aspnet.4guysfromrolla.com/articles/021506-1.aspx

|||

Many thanks!! []