asked on

Encrypt SQL string or hide from SQL Profiler

Hi Experts

Is there a way of encrypting a query when it is passed from a web app so that it doesnt show in SQL Profiler?

Thanks

8080_Diver

Why would you want to do this (other than for malicious purposes)?

RiteshShah

sorry, it is not possible, you can encrypt string but not query.

chapmandew

If you use a stored proc you can encrypt it

SOLUTION

momi_sabag

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

chapmandew

momi, it depends on what events you've selected for yoru statement to be true.

David C

ASKER

8080 Diver: Its not for malicious purposes, the selling point of the application I've created is in the querie's i.e. it knows where to go and look. I wouldn't want someone opening SQL Profiler seing everything that happens and creating their own program. I will use momi sabaq's answer i.e. create a view, encrypt it.

Since this will be installed on other peoples servers will it be possible to stop anyone else decrypting this query or can the sa do whatever?

If untrue is there any other way of protecting the application/queries?

ASKER CERTIFIED SOLUTION

chapmandew

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

drequinox

best bet is to put everything in stored procs and encrypt them with WITH Encryption

chapmandew

yep!

David C

ASKER

Any advantages of a view over stored procedure?