asked on 5/19/2011

Best Practise for Storing SQL Connection Strings in C# WIndow Form Applications

What is the best practise for storing and securing SQL Server connection strings in window desktop applications? Is it better to store in the app.config or maybe a separate class. Also, is there any way to encrypt or secure the connection string?

Last Comment

Éric Moreau

5/19/2011

Alfred A.

5/19/2011

In my opinion, app.config is the place to put your connection strings. The purpose of the app.config is for configuration settings, so it is appropriate to use app.config than putting it in a class.

For encrypting app.config, check the links below:

http://www.codeproject.com/KB/cs/Configuration_File.aspx

http://datacogs.com/datablogs/archive/2006/08/23/393.aspx

Kalpesh Chhatrala

5/19/2011

Check below link for Securing Data Layer in C# Application.

http://stackoverflow.com/questions/1214621/securing-your-data-layer-in-a-c-application

ASKER CERTIFIED SOLUTION

Kalpesh Chhatrala

5/19/2011

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

Éric Moreau

5/19/2011

also check http://emoreau.com/Entries/Articles/2009/05/Using-the-ConnectionStrings-section-of-the-configuration-file.aspx